4 ms·I would never expect them to do that without vendoring the package. Which mitigates that risk.by rowanG077 4y agoI would never expect them to do that without vendoring the package. Which mitigates that risk.