3 ms·That assumes someone is actually auditing the npm deps.by iforgot22 2y agoThat assumes someone is actually auditing the npm deps.feross 2y agoIt’s trivial to audit your dependencies with https://socket.dev https://socket.dev Disclosure: I’m the founder.iforgot22 2y agoDespite the ease of auditing services, there are notoriously a lot of devs using unaudited deps. Maybe they don't even think about it, unfortunately.