Reposting this comment as I think it’s relevant at the top level. On Firefox the reviewer took my source code, inc package.json, and ran it through the exact s

Reposting this comment as I think it’s relevant at the top level. On Firefox the reviewer took my source code, inc package.json, and ran it through the exact same version of my dependencies and then did a checksum of the output against what I submitted. The reviewer also read my source code and reviewed all dependencies. It was a pain to get through but doing good things for your users takes effort.