The debacle [1] that caused this to be on everyone's radar initial has me hoping that there will be a group formed that audits open source software for maliciou

The debacle [1] that caused this to be on everyone's radar initial has me hoping that there will be a group formed that audits open source software for maliciousness. I know that is what virus scanners are for, but there should be a more transparent way to understand what changed without putting so much trust in unknown, anonymous developers. [1] https://news.ycombinator.com/item?id=40584606 https://news.ycombinator.com/item?id=40584606