Most projects I'm involved with require measures that go a bit further still. Got to be honest though, it can be frustrating at times. Just sprinkling bits of

Most projects I'm involved with require measures that go a bit further still. Got to be honest though, it can be frustrating at times. Just sprinkling bits of awareness around by bringing some of these considerations up whenever I can. It's an uphill battle, although, the general carelessness around extension and dependency use I'm seeing - and that even after all the shit that's been going on in that space - makes it one worth to fight. Edit: Regarding the chain of trust you mention, that one has sort of come and gone, and there is not a whole lot of trust involved in the processes I'm saddled up with.