@ieure I could and probably should.

But for every developer that uses AI publicly there will be those that hide it.

It's the hiding part that makes any degree of trust go out the window.

I'm honestly at the point where I'd rather write my own dependences that hope others are telling the truth. But that's only because I have the time to do so.

I wish there was a way to have a trust chain. But my understanding is that it often doesn't represent trust but more social connections. In comes social engineering.