Virtually no one reviews entire code bases of dependencies, what on earth are you talking about?