I wonder if anyone has really validated the "many eyes" concept in open source with respect to the number of eyes and number of open source projects. I'm not questioning the efficacy of code review, but just looking at numbers.

In order for code review to be effective, the set of reviewers must cover all the aspects that the code affects. That ranges from coding language to solution subject matter. It must also cover platform concerns like operating system and hardware.