IMO, aggressive npm install is the superset of the framework problem. We code review every line written by other developers at our company with a fine toothed c

IMO, aggressive npm install is the superset of the framework problem. We code review every line written by other developers at our company with a fine toothed comb, but will add a dependency from a massive advertising company or some dude in Russia without a second thought. It’s wild.