Why should adding a dependency be a reviewed decision?

Short interview answer

Each dependency adds code you now ship and maintain, plus its own transitive tree, plus its maintainers as people you implicitly trust. For small utilities the cost of a dependency — supply-chain surface, bundle size, update burden — can exceed the cost of writing the few lines yourself.