> Nobody audits a substantial fraction of their dependencies. I do! In fact if we exclude the language implementation itself[0], a plurality of my projects hav

> Nobody audits a substantial fraction of their dependencies. I do! In fact if we exclude the language implementation itself[0], a plurality of my projects have NaN% of their dependencies fully audited. 0: ie, compiler, hardware, etc; if you object to this, please do explain how to eliminate these dependencies; I'm quite interested.