Like protect them how? If you reject every company with a 'bad code base' you will be left with a very small pool of companies. Depending on how you define that.