We haven't planned on allowing apps to use these packages in the run-time, and haven't measured the possible impacts/vulnerabilities it can cause. Are we required to do this here?

We haven't planned on allowing apps to use these packages in the run-time, and haven't measured the possible impacts/vulnerabilities it can cause. Are we required to do this here?

_Originally posted by @d-gubert in https://github.com/RocketChat/Rocket.Chat.Apps-compiler/pull/2#discussion_r481486933_