When you're talking to an open source dev, just remember that they are literally giving you their time for free, and they are people who don't like to be treated poorly.
Edit: Just to be clear, I don’t mean any ill will toward the guy. He’s frustrated and he’s just taking it out in the wrong venue at the wrong people, but that doesn’t mean he’s a bad person.
Edit 2: The reinstalling he’s talking about is NPM. So just running npm install. It’s because he tried removing the node_modules directory, which is a reasonable thing to do, but it means you need to reinstall the modules with that command.
You're right to an extent, but there is nuance. No end user goes through the Debian repositories and checking the source code for each package by hand. You would be well within your rights to be annoyed if a
rm -rf /got added into a script in the repos somehow. A level of trust somewhere is unavoidable for things to work smoothly.Of course the difference in level of responsibility between core repos and random code pulled of github is vast.