>someone sends a dev at some company, or even a freelancer, some code The code itself could be malicious and have backdoors. Really you shouldn't run anything

>someone sends a dev at some company, or even a freelancer, some code The code itself could be malicious and have backdoors. Really you shouldn't run anything untrusted outside a sandbox or some other form of isolation