Hacker News Reader

I'd like to think that there are supply chain safer languages.

Which are languages that have a large comprehensive official standard library backed by a large corp.

Those corps have the manpower to better audit contributions.

Examples: Microsoft's .NET (C#/F#) and Google's Go.

I see what you mean. A "batteries included" standard library reduces the risk for obscure third-party dependencies.

Qt comes to mind. It includes the kitchen sink and a lot of applications can be written without third-party dependencies.

Go programs tend to have a lot of third-party package dependencies. I don't think it's a good example.