I full source bootstrapped a Linux distro from hex0 all the way to nodejs binaries just to deal with trusting trust risks.
"just give up" is not a valid strategy.
https://codeberg.org/stagex/stagex
where can I follow you? blog, x?
https://lance.dev has my mastodon etc. My friends and I also run the #! community, https://hashbang.sh #!:matrix.org