or just vendor your deps like we have been doing for decades.
still need to read them to make sure you don't vendor a trojan in the first place.
alt Hacker News
still need to read them to make sure you don't vendor a trojan in the first place.