install from the repo then? You can install a specific version from git via yarn/npm. How do you trust a url more without reading the code? What's going to s

install from the repo then? You can install a specific version from git via yarn/npm. How do you trust a url more without reading the code? What's going to stop deno ecosystem from putting minified js files on cdns and import them?