> Community maintained software with short dependency lists doesn’t have this problem. That’s just not true. One of the first things mentioned in the post is v

> Community maintained software with short dependency lists doesn’t have this problem. That’s just not true. One of the first things mentioned in the post is vulnerabilities. An image viewer shouldn’t be able to put your SSH keys at risk no matter how many memory safety issues it has. Plus there’s all sorts of software that doesn’t have short dependency lists that I’m sure you’d still like to use. A web browser, for example?