It's not just that. Because it's all in the same repo and built with the same build tool it's also easier to run the same security checks you would use for your

It's not just that. Because it's all in the same repo and built with the same build tool it's also easier to run the same security checks you would use for your own code all automatically as part of your build process. All the tooling you use to secure your own code can be used to secure third party code as well with the same low level of friction.