> One could argue that adding a library is in some ways similar to copy/pasting code in as much as, one doesn't know what the code is doing, and yet that doesn't leave me with a sense of unease!
replyIt does, to me. Been burned enough times that I now, at minimum, audit the source code of third-party libraries before I use them.
Fair enough... I think it really depends about what dependencies we talking about.
replyNPM decencies is a bit of dumpster fire, supply chain attacks galore! A well known python (think numpy) certainly is less discomforting, and a "industry standard" C library like GSL or SDL3, I just use it and move on