> The 1password developers should be auditing all updates to those dependencies too This is just wishful thinking unless there's a public security audit agains

> The 1password developers should be auditing all updates to those dependencies too This is just wishful thinking unless there's a public security audit against a specific version. Funny you bring about blind trust when talking about a security sensitive app.