Does AlmaLinux or upstream review source code of all packages?

I am looking for a distribution highly resistant to supply chain attacks. By supply chain attacks I mean some distro maintainer or program developer slipping in a backdoor.

I am wondering if AlmaLinux is more resistant to supply chain attacks by backdoors than distributions like Debian and other common ones.

As some people know, Debian maintainers commonly put stuff in from third parties without manually reviewing each line of code.