u/CitationNeededBadly

I liked Zed when I tried it as soon as the windows version appeared. except for the "download and install random NPM packages and who knows what else without asking" behavior that triggers upon opening files of certain types. Did they add any kind of control (or even notification) over what gets downloaded and installed in the 1.0 release? Is there at least a way to pin the version of what its grabbing?