In Rust we have cargo vet, where we share these audits and use them in an automated fashion. Companies like Google and Mozilla contribute their audits.

And it's a great idea, similar thematically to certificate transparency