Does any distro read through 100% of the source-code of a package before adding it to its repo?
https://sh.itjust.works/post/19232395