Given that this was hidden even from the organization that was in control of the codebase, it&#x27;s not clear that open source on its own is a real solution. This made it through whatever initial review processes Juniper has, and was only caught by an &quot;internal code review&quot; performed after the fact - an exercise only infrequently conducted on most open source projects.<p>Given enough eyeballs backdoors can be easy to spot in source code, but eyeballs aren&#x27;t an unlimited resource. In addition to open sourcing your software, the community that cares about the project needs enough funding or institutional support to actually review the code in question.