I don't know why you are being silently downvoted, as I think it is worth talking about the potential of using static analysis to improve things. One promising

I don't know why you are being silently downvoted, as I think it is worth talking about the potential of using static analysis to improve things. One promising approach is Endo[0] which "uses LavaMoat to automatically generate reviewable policies that determine what capabilities will be distributed to third party dependencies." [0] https://github.com/endojs/endo https://github.com/endojs/endo