This is a problem frequently complained about with language package managers: huge amounts of unvetted code which is just pulled in without being reviewed. This

This is a problem frequently complained about with language package managers: huge amounts of unvetted code which is just pulled in without being reviewed. This allows the work of vetting the code to be distributed and used by the average developer.