You have a 2nd independent sets of eyes looking at software, rather than "absolutely nobody" like it is if you use npm and friends?