>Secure All packages validated and delivered via secure supply chain from CIQ repositories. How deep does this go. Are they inspecting every line of code in e

>Secure All packages validated and delivered via secure supply chain from CIQ repositories. How deep does this go. Are they inspecting every line of code in every source repo ? What happens when I need a package they haven't validated yet ?