Yes, which makes me very vulnerable to supply chain attacks.

Yikes! I had a scare once, and since then I only run sandboxed code or scripts I've written with minimal 3rd party deps.

I assume you have other mitigations in place?

	▲	simonw 16 hours ago \| parent [-]
		Not really. I have good backups and I try to stick with dependencies I trust. I do a lot of my development work using Claude Code for web which means stuff runs in containers on Anthropic's servers, but I run things on my laptop most days as well.