As has been demonstrated multiple times, “more eyes” is a fallacy.

There have been plenty of malware on perfectly open source and often reviewed repositories.