In react's case you put your trust in facebook and because of the size most issues get discovered and someone has an article on how to fix before breakfast.
When you include left-pad in your own project you should audit it. In the end you are the only line of defense. With react it's larger so you can trust others.
When you include left-pad in your own project you should audit it. In the end you are the only line of defense. With react it's larger so you can trust others.