what universe are you living in that you don't have to trust code written by randoms? nobody has the time to evaluate every transitive dependency. you take a sm

what universe are you living in that you don't have to trust code written by randoms? nobody has the time to evaluate every transitive dependency. you take a small risk of getting hit by a car when you cross the road, and you take a small risk of a bad dependency when you want to create substantive software