Shai-Hulud and the risks of external dependencies

Shai-Hulud code review