I‘m glad to see much saner responses to https://gist.github.com/dominictarr/9fd9c1024c94592bc7268d36b8d83b3a than on the GH issue.

I’m still baffled by all the „but there are too many submodules to vet them“ argument. How can you go from „I recognized this problem“ to YOLO and then find some one else to blame when your shit catches fire?