package management is a really big security issue nowadays. for example, npm is a really great tool and it's just as insecure. If a package you use is hacked an

package management is a really big security issue nowadays. for example, npm is a really great tool and it's just as insecure. If a package you use is hacked and you haven't made a version lock, anything can happen to your application.