I think we'll see more investment in scanning changes (with static code analysis tools and AI) before publishing on package registries like crates.io.