I believe the real problem is that devs install random binaries, or modules, without any real concern for what malicious activities, even if unintentional, thes

I believe the real problem is that devs install random binaries, or modules, without any real concern for what malicious activities, even if unintentional, these artifacts may perform. Forget the fact that it’s on the dev’s machine, they move this stuff into production without proper security vetting. Many devs just blindly install things from npm, copy random snippets from GitHub gists, execute remote shell scripts via curl that they just copy and paste into the terminal because they read it in some blog post, and on and on. Anyway, just my worthless < 2 cents.