Many times going through code bases I have seen an entire library included for 1 method that could easily be replicated in code. I've seen this too. Initially,

Many times going through code bases I have seen an entire library included for 1 method that could easily be replicated in code. I've seen this too. Initially, I thought it was an internal joke. Lastly, license type matters a ton, Probably more of a concern for established companies, startups usually don't pay much attention to this. A fourth question closely following is what dependencies does it also introduce to my system. This could be very time consuming for dependancy-rich libraries. At least license types can be auto inspected with a recursive tool. Dispelling security concerns would require some serious auditing.