[egorfine]

Yes I perfectly understand the reasoning and technically it is sound.

It becomes insane once you start thinking of real life implications, specifically supply chain attacks.

Although it's only marginally more insane than the other ecosystems.

[dralley]

The alternative is sometimes that people just copy and paste code from libraries that never gets updated.