@schmittlauch It's surprisingly safely implemented - if there are multiple packages offering the same binary name then it'll make you choose one first, and it only fetches packages from nixpkgs, which has at least had nominal review :)
(So basically, it avoids the two biggest security issues that eg. npx has)