> Let's also not forget that every other website on the planet that relies on npm also relies on the blind trust of unverified UI components.
It feels like you think you're making a really good point here. In reality, it's just a run-of-the-mill appeal to popularity. The programmers doing this sort of thing on other websites are in the wrong, too.
