[catlifeonmars]

The hardest part is checking to see if the version of left pad you just pulled or one of it’s 300 dependencies has a supply chain vuln in it.