@simon “small enough to read, doesn’t have too many random giant subdependencies”. then i scan it for noob errors or common mistakes. more if i’m writing something actually security-critical (then i try to stick to stdlib). this is in re: golang.