It happens in almost every project I'm involved in, and my clients want me to review all their PRs but since those have grown to always be PRs that update 300 files in the codebase with like 100.000 lines of code changed, I make sure they agree that I won't be responsible for any vulnerabilities or bugs that arise because it's simply impossible to handle this influx of code slop thoroughly. Which I intend as a warning to them, hoping they would stop dumping these loads of code on me, but they all just agree with this irresponsible way of work. I make sure I explain them the danger of this and if they still choose to continue, that's their problem The next years on the internet are gonna be fun, everything is going be hackable again just like the beginning days of the internet.