I have no comments regarding their dependency system. But the security features are stupid on their face. If you can’t trust your own code, why should users?

I have no comments regarding their dependency system. But the security features are stupid on their face. If you can’t trust your own code, why should users? It’s too naive anyway. Why would I grant carte blanche to any entire feature instead of per dependency? So Deno started with a bad idea, and then implemented it half-baked. Which is it? Do you not trust your own code or do you? You don’t? Why not? Or why do you only trust a subset of it? If you do only trust a subset of it, why have you denied or granted the entire feature? It’s useless. It’s one of the dumbest software features I’ve seen in my life. Trust a dependency and pin its signature.