The vast majority of code would end up with no attestations. Theres simply no incentive for anybody to do so.

It's tragedy of the commons, but now with more visibility in to how tragic it is.