My first reaction was that if we need protection from pieces of software we ship because nobody knows what we ship, something must be deeply wrong. But npm-sna

My first reaction was that if we need protection from pieces of software we ship because nobody knows what we ship, something must be deeply wrong. But npm-snark aside, maybe some lack of trust must come from a highly modular open source ecosystem. If a library I ship could abstain from unneeded platform capabilities, that would certainly reduce catastrophic bug/attack surface, and I'd sleep better.