you should worry about npm/pypi malware, not memory corruption bugs