[querulous]

it works fine and there's someone happy to do it for free. why would anyone try to compete with it?

[aembleton]

To mitigate the risk of a supply chain attack.

[jmplng]

If you care, review and pin. Way easier than building a “competitor” to something there’s clearly no money in.