For sure, this could probably be automated in either a pre-commit script or something like GH actions. This is an interesting problem. Thanks for sharing @james.tartarus.org!

If I were running a dev team (which I’m not) I would ensure that we have proper training in place, for sure. But even then, I’d vet the devs I hire to make sure they poses the aptitude to understand these risks.

Sadly, we are moving into this era and the inexperienced will be the targets.