> Why should the version of a lib in one part of the software somehow pose existential threat to the infrastructure? Because that's how software developers wro

> Why should the version of a lib in one part of the software somehow pose existential threat to the infrastructure? Because that's how software developers wrote every dominant packaging system :P There are tradeoffs to self-contained units. Disk space isn't so much of a practical concern these days, but security is very real: with a dozen apps, you could be at the mercy of a dozen different entities to update their embedded OpenSSL libraries.