The expectation is that someone has already done that with a dependency. If the code has just been sharted out by an LLM, it has by definition been reviewed or even understood by no one.