The threat is that you depend on this library or use the VS Code Extension.