such a project would unfortunately be very difficult to produce considering the deep state zero days in the code and the difficulty of preventing a malicious agent from inserting them in such a massive code base. you never know how far up the lineage the injection happened.