[kortilla]

Compromised third party libs are absolutely not “an unexplored area around security”. It’s a super well-known threat.

[sethvargo]

Sorry - by “unexplored” I meant “not a topic I’ve seen discussed at length with regard to this particular issue”