Protecting Myself from Dependencies: Dev Container Setup

The past year Shai-Hulud et al have wreaked havoc on NPM, PyPI, and other package ecosystems. I have traditionally developed my hobby projects under my own user, managing tooling with asdf or mise, but this has now become untenable. A compromise in a single one of the countless dependency packages would allow access to my full home environment.To help put my mind at least somewhat at ease, I've moved all my projects over to a Development Container setup. This system was originally devised as a way to share a reproducible-ish environment between developers and "to aid in continuous integration and testing", but it also works as a layer between the project and myself. If you haven't read up on dev containers, in a nutshell instead of having your development tooling running on your computer directly, the editor will start a container and make sure all the source code is synced between the container and the host machine. Any developer tooling like the compiler, package manager, formatter,…