Yes, a valid point. But you can make the same argument against anything really. Do you know what your language is doing in the background? Or your database? Or

Yes, a valid point. But you can make the same argument against anything really. Do you know what your language is doing in the background? Or your database? Or your web server? Or kernel? Or your CPU? To tell obvious lies about node_modules in particular, IMHO, does not serve any purpose in raising the awareness about that particular problem.