Sharing source code isn't enough. The right people need to be aware of its existence at the right time. For instance, there needs be part of their governance

Sharing source code isn't enough. The right people need to be aware of its existence at the right time. For instance, there needs be part of their governance that due diligence be performed prior to executing a contract.