The smaller the supply chain, the smaller the chance of supply-chain attacks. I program mostly in Java these days, and I have always been very careful of addin

The smaller the supply chain, the smaller the chance of supply-chain attacks. I program mostly in Java these days, and I have always been very careful of adding external dependencies to my code bases. A few times I have in fact replaced a commonly-used dependency with a home-grown own; and yes, I've been very happy.