isnt that kinda like downloading and using software a team you have no knowledge of has produced and released?
All you can go by is 'does it do what it says it does'
Yeah, all these devs pretending you can only trust code you understand, then going and pulling in 1000 random npm deps...
Yeah, all these devs pretending you can only trust code you understand, then going and pulling in 1000 random npm deps...