I'm personally amazed that we see so few security issues with all the dependency chains that we build on.