“Tripping over the potholes in too many libraries · The Ethically-Trained Programmer”
My view? Most serious projects should aim to have as few major external contributors as possible. In node each new npm package brings in at least one major contributor, usually more.