I find that I use 3rd-party dependencies precisely when I need an implementation that I don't have the time or knowledge to build myself. I would like to echo the sentiment that I am not going to audit such code for malicious behavior when I am unlikely to understand the non-malicious behavior in a reasonable amount of time.
(Frameworks for connecting to services are different, of course, but are still difficult for someone without knowledge of the service's API to trivially audit.)