Surely Microsoft would already be doing this extensively across GitHub, NPM, NuGet etc...