That's how we get things like leftpad in the JS ecosystem. On one side, I think if we had a good system of trust, that's not a problem. And part of me likes t

That's how we get things like leftpad in the JS ecosystem. On one side, I think if we had a good system of trust, that's not a problem. And part of me likes the idea of something like Shadcn - you like a component? Copy it into your library. However, if there ends up being a vulnerability, you have no idea if you are affected. For some code, that's not a problem. For other code, we truly depend on having as many eyes as possible on it.