yes, that is the other half of the coin: don't run code if you don't know what it does. an extreme version of that: don't use libraries at all. I am trending

yes, that is the other half of the coin: don't run code if you don't know what it does. an extreme version of that: don't use libraries at all. I am trending more and more to this extreme as I age, because people aren't learning their lesson, and the npm ecosystem keeps biting them over and over...