[croes]

Is there any kind of security review or is it a new kind of npm that is open to supply chain attacks.

Considering what kind of data people are giving to AI, security is an important issue