I think it’s a misapprehension to focus on the granularity of release items (packages). Why should that especially influence the security (or other variables of

I think it’s a misapprehension to focus on the granularity of release items (packages). Why should that especially influence the security (or other variables of quality) of the underlying source? If a given app includes 1400 pieces of code, does it matter that you can discern all 1400 externally vs if all 1400 are bundled into a single package? However it’s bundled, there’s code beneath for it all, all with the same potential problems. All of it with the same need to be reviewed and/or trusted. If anything, the transparency may help. It’s certainly hard for me to see why it hurts.