Tangential, but one of my stock interview questions is to ask candidates how they decide whether to use a new dependency in production code. The vast majority

Tangential, but one of my stock interview questions is to ask candidates how they decide whether to use a new dependency in production code. The vast majority of people say GitHub stars and leave it at that. Occasionally they also mention checking how active the project is. Very, very rarely, someone will say they scan the code, maybe run the tests, check the open issues etc. This is production code!