Less is safer: How Obsidian reduces the risk of supply chain attacks

"The other packages help us build the app and never ship to users, e.g. esbuild or eslint."

Still, they can present a security risk by injecting malware at build time