Almost neither of which use a lot of dependencies. It's still C and C++ world out there, and everything gets shrink wrapped. It's more likely that you would fi

Almost neither of which use a lot of dependencies. It's still C and C++ world out there, and everything gets shrink wrapped. It's more likely that you would find a logic bug or a well known security issue in a single library than somehow infest the supply chain of these particular applications. Every piece of off the shelf software is labelled and audited in that world.