Does SvelteJS convert third-party libraries code to plain Javascript?

Question

If SvelteJS compiles everything in your code to plain JavaScript does this mean that third-party libraries' code will also be converted to plain JavaScript and remove the ever so problem of npm modules vulnerabilities for JavaScript frameworks, or I'm getting this all wrong

Answer 1

Svelte compiles your components. That's all.

Answer 2

Transpiling code will usually transpile (and preserve) the security vulnerabilities too.