Virtually no one reviews entire code bases of dependencies, what on earth are you talking about?
They reviewed it in the sense of integrating something that worked, this is something maybe not completely different but different enough to give pause.
They reviewed it in the sense of integrating something that worked, this is something maybe not completely different but different enough to give pause.