> For any "serious" application of critical code; every library used need to be vetted and verifierad to be maintained and secure. A project only become seriou

> For any "serious" application of critical code; every library used need to be vetted and verifierad to be maintained and secure. A project only become serious once legal is breathing down engineering's neck. Before that, it's usually the far west. After, it becomes a security circus trying to patch the technology deficiency (custom registries, complex linting and other analysis tooling,...)