> I want a better way to manage external dependencies mostly On that point, I'm totally with you. The excessive caution about the software supply chain is prob

> I want a better way to manage external dependencies mostly On that point, I'm totally with you. The excessive caution about the software supply chain is probably justified given the impact of a potential incident, but certainly frustrating for the >99% of times that dependencies are safe.