@nelisboucke ... but I think with same rare
cases (like in this case where you pull in an upstream release, not
continuously), PRs in companies are often used to document 4-eye principles was
followed (aka to cover your ass).