Reply to 1295288321153929221
In addition dependencies can be pinned (e.g. using @pikapkg's https://www.skypack.dev/) but this means dependency and security monitoring tools like @snyksec face entirely new challenges, they need to discover dependencies now directly from source files.Response: 1295288324224098306