@pinoaffe While technically true, this isn't what people are actually complaining about, and these complaints are most frequent in the context of JS - which *does* have that tooling.
It's purely the "oh no the dependency count is so high" that sets people off, no further reasoning beyond some vague assumptions about how that means more risk (that they cannot substantiate).