I'm all for it. They also don't need npm because you just put the entirety of every library you need in context too. Which means we all get to enjoy reduced attack surface!
lol... if anything git is way more important in this context. This guy does realizing he's just outsourcing his trust to other devs and their infra teams right?
npm
because you just put the entirety of every library you need in context too. Which means we all get to enjoy reduced attack surface!