The script is just a cat or vim away from audit. Its dependencies on the other hand…
I meant it’s easy to inspect your script’s logic — look it. Bunch harder to audit the code in dependencies though…
But it’s much harder to inspect what the imports are going to do and be sure they’re free of any unsavory behavior.