I realise what is happening. I realise there are thousands of people whose work contributed to being able to do this. I also realise that some of those people

I realise what is happening. I realise there are thousands of people whose work contributed to being able to do this. I also realise that some of those people are getting pissed off and annoyed that their contribution isn't being recognised (see TFA for details). And those people have the ability to "inject code that steals secrets" into my code base and cause massive headaches for me. Which is why I'm extremely careful which dependencies I use, and don't use dependencies whenever possible.