[ratww]

Yeah, that’s the biggest issue, IMO.

Even a simple app with only React as a production requirement will have dozens of issues a month.

There are some packages that don’t have as many dependencies such as Typescript or Prettier, but that’s not enough, since the most popular bundlers have hundreds of of dependencies.

No matter how careful you are, you get flooded by security issues.