Or, god forbid, a supply chain attack on your file manager. Thankfully, it's using pinned versions, so it's not as bad as if could be.