That's a funny story. Yes, we also check licenses, security, popularity and maintainers before introducing a dependency. Then of course again track changes for

That's a funny story. Yes, we also check licenses, security, popularity and maintainers before introducing a dependency. Then of course again track changes for every future release so there is a significant overhead to for every dependency. When you say never took on any external code repository does it mean you guys would make a copy of every package you add, build it yourself and not use something like npm dependencies in production?