Comment Re: No thank you sir, I don't like it. (Score 1) 114
That doesn't change the fact that it's always on you, as an engineer, to know what your code does. Especially in the age of supply chain attacks, like the recent openssh backdoored from a dependency. That didn't even involve AI, and there was a lot more at stake than a stupid credit card number.
In fact, a practice I commonly do before deploying a release is to look over the manifest (i.e. cargo.toml, pyproject.toml, gradle, etc) and see if there's anything I don't need anymore, and ensure that the selected version of all imported libraries are at least a month old, unless one has a badly needed feature or bug fix.
If you're not vetting your own code, then you're a bad engineer and you should really question your life decisions. Period.