Our company has a strict policy on reusing public app store components. However, there is no way to avoid developers from integrating components which haven’t been validated and approved, or limit access to approved components only.
Giving developers access to a private app store only, and somehow making approved public app store components available in the private app store could solve this issue.