Comment by lrvick

> NOONE (beside google) is going to do that. Its too costly, you need two big teams just to handle that one part.

And yet my team and I at stagex are building a decentralized code review system to handle this anyway. Not waiting around with our fingers crossed for the corpos to solve supply chain security for us. Has to be a community led effort.