I kinda feel that way with npm and nuget. I'm instalking software all over the place because a coworker told me to or I found it suggested on the internet, but

I kinda feel that way with npm and nuget. I'm instalking software all over the place because a coworker told me to or I found it suggested on the internet, but I don't come even close to the skill level needed to verify a single one of these libraries. The only reason it makes me uneasy instead of keeping me up at night is because I can point to the rest of the industry and say it's standard practice if a problem happens.