If it's brand new RiscV CPU that was just relesed 5 min ago, and nobody really tested then yes. If its standard CPU that everybody else uses, and its not known

If it's brand new RiscV CPU that was just relesed 5 min ago, and nobody really tested then yes. If its standard CPU that everybody else uses, and its not known to be bad then no. Same for software. Is it ok to have dependency on AWS services ? Their history shows yes. Dependency on brand new SaaS product ? Nothing mission critical. Or npm/crates/pip packages. Packages that have been around and seedily maintained for few years, have active users, are worth checking out. Some random project from single developer ? Consider vendoring (and owning if necessary ) it.