LESS IS SAFER: HOW OBSIDIAN REDUCES THE RISK OF SUPPLY CHAIN ATTACKS

Summary from the TLDR Web Dev newsletter

Supply chain attacks involve malicious updates sneaking into open-source code. Obsidian minimizes risk by depending on minimal third-party code, often re-implementing functions or forking modules when feasible. When using larger libraries, Obsidian uses version pinning and lockfiles, guaranteeing a deterministic build process.