Earlier quoted context omitted.
I would like to draw to your attention the magnitude of that task, with a recent link from another HN comment discussion: http://npm.anvaka.com/#/view/2d/react-native and https://github.com/microsoft/react-native-windows/blob/maste... Turns out left-pad.js is on line 8571 of that 14+k line yarn.lock file. How many React Native developers do you suppose have reviewed every line of code in every library referenced in t…
In react's case you put your trust in facebook and because of the size most issues get discovered and someone has an article on how to fix before breakfast. When you include left-pad in your own project you should audit it. In the end you are the only line of defense. With react it's larger so you can trust others.
I am the sole maintainer of airbnb/lottie-android despite the fact that I left the company almost 2 years ago and it is used by tens of thousands of companies including Google, Samsung, Microsoft, Uber, Netflix, and countless others.