The precedent this would set would be disastrous. Any bad actor could try to force a company to release IP to prove they aren't acting maliciously. We have the legal discovery process for a reason.
My point is that unvetted IP/code shouldn't be used in democratically critical processes such as elections in the fist place, doing so increases the surface area of bad actors to act maliciously.