Comment by anilakar

> no supply chain trouble

In other words, you are the supply chain. You're responsible for the bugs you create, but at least they are your bugs not caused by upstream's upstream's upstream's maintainer installing an infected JS library.

Shall we call this "vertically-integrated programming" then? :-)