What is really inside the AI tools you blindly install

I love the package ecosystem in PHP and Laravel specifically.

You can get all these different packages to do whatever you want, and that saves a ton of time.

But I think we kind of talked about this before.

There's always a risk with these packages, right? Do you read the entire package, right? Do you know what all that code is doing? There's extra weight

in it, I guess.

Just read the readme or you're talking deeper?

Oh, and I'm talking way deeper, like looking at the source code, because readme is just someone's version of what it does.

But like, what does the actual code do? I think we did talk about this before.

We said, like, why are you installing a package? Maybe you don't need that package.

Right.

Yes.

But, you know, and so I've been thinking about that a lot.

It's like, do people even read packages or like, do they read the source code? And does that matter? And does that even apply anymore?

Yeah.

Yeah.

I mean, the short answer is no.

I think it would be a rare person.

And I'm going to include myself in there, Aaron.

Mm-hmm.

that would like thoroughly vet and read the source code.

It's certainly like once it's installed, like not every release,

but...

I will interrupt you here for one quick second.

I also agree with you on that.

I would like to say that I read the source code, but I tend to focus on packages that are already known, you know, that I know that kind of work.