It's not necessarily more or less secure. You load libraries by simply linking ES Modules from your local files or the internet; there's no central repo, you l

It's not necessarily more or less secure. You load libraries by simply linking ES Modules from your local files or the internet; there's no central repo, you link the exact URL. So it's as secure or insecure as your source. Some people say it's insecure because, well, if you get your modules from a compromised site it is. However recent events have shown there's also plenty of danger with centralized repos as well. The advantage to Deno's approach is it encourages using CDNs, which allow that code to load quicker especially if you're using edge functions or something like CloudFlare workers. It also requires you to be super explicit about where the code's coming from. The negative is that many people will download code from dodgy websites then complain later.