> There's nothing wrong with pulling in the `libc` dependency. Yes, there is. Not only is dependency transitive: you now depend on everything libc depends on —

> There's nothing wrong with pulling in the `libc` dependency. Yes, there is. Not only is dependency transitive: you now depend on everything libc depends on — but now you're depending on the correctness AND properties of the dependency, to include security.