It’s extremely likely, verging on certitude. In some ways, the pressure of requirements like this may be positive: “Do we really need a dependency on ‘leftpad’

It’s extremely likely, verging on certitude. In some ways, the pressure of requirements like this may be positive: “Do we really need a dependency on ‘leftpad’?” But it will also add pressure to make unsound NIH choices as you suggest.