Comment by dspillett

It could push us further into dependency hell though, as people look for a package that does a simple task instead of the risk of expanding their bug/attack surface area, assuming that the library they depend upon has itself been checked (and the same for its dependencies all the way down).

Trying to keep code small could backfire by ballooning dependency on dependencies to do more of the work.