Well he's right, that's why I rarely trust code from Nuget. I will bring down the repo, examine the code myself. I get that I may miss something but, then, that's on me.
My boss isn't going to blame me for trusting Microsoft. My boss will blame me for trusting Mike Nobody who is a developer in CountryZ who has built this really wicked shortcut I need.
Wonder if this will end with artists/writers or if software developers will join in too. Not like AI learned to choose on it's own.
I wonder if this is why Microsoft and Meta just have away llama 2.