upvote
You’ve traded supply chain vulnerability for slop vulnerability.
reply
Except your supply chain could also be slop and you have no idea (unless you’re auditing your dependencies, right?).

I’d take vibe coded vanilla js slop over npm dependency hell every day of the week.

reply