When taking in third party dependencies you take over responsibility. If I build a machine and the third-party screws I use break my customers come to me. If

When taking in third party dependencies you take over responsibility. If I build a machine and the third-party screws I use break my customers come to me. If I use bad quality npm modules as dependencies it's my bad. If I use an embedded system with flaws it's my issue.