Curious to hear your thoughts on corepack. Personally I'm very concerned about the lack of control over its highly opinionated behaviour, the intentional silen

Curious to hear your thoughts on corepack. Personally I'm very concerned about the lack of control over its highly opinionated behaviour, the intentional silent/background execution, the whole shimming concept, its opaque and unorthodox distribution, etc. A supply chain is difficult to secure when your supplier starts things off by silently curl-piping an unverified yarn installation script in your userdir, instead of simply executing the `npm install` command you told it to run (e.g. because `package.json` lists yarn as a compatible package manager but not npm).