not the answer for you but maybe you find this interesting

Max Jackson (@mxjxn) on QuilcastOh BTW if you're building an app that connects to a wallet and you're worried about supply chain attacks, you could do worse than building your app in clojurescript, which typically requires far fewer dependencies thanks to having Google's closure library built into the language.quilcast.com