Zero in Debian. They have enough other procedures to catch it.

Less diligent projects had it but there are easier ways to fix it