In my experience, its exceptionally rare to have vendors release code like that, if for no other reason than opsec concerns. Obviously larger clients have much more leverage, but even in those situations its usually because they're getting a bespoke branch of whatever mainline firmware is produced for their other retail products (assuming its not from-scratch for a client that size in the first place).
