zlacker

>>net01+(OP)
I played around with it quite a bit. it is both impressive and scary. most importantly, it tends to indiscriminately use dependencies from random tiny repos, and often enough not the correct ones, for major projects. buyer beware.

>>shwouc+5q
Given that PRs run actions in a more trusted context for private repos, this is a bit concerning.