Comment by Alcha

I feel like this question has good intentions but comes across wrong. It's virtually impossible to audit literally every nested dependency.