> a package may be published as […] held for manual review

Manual review by whom?