> You solve two unrelated problems (tracking library dependencies and security patching) with one complex interdependent solution (...) Linking to a library is

> You solve two unrelated problems (tracking library dependencies and security patching) with one complex interdependent solution (...) Linking to a library is not what I would describe as "complex", or have any meaningful challenge regarding "interdependence". This issue makes no sense in Windows, which you are free to drop any DLL in the project folder, and for different reasons also does not make sense in UNIX-like distribution which already provide official maintained packages. I'm sure that there are plenty of problems with distributing packages reliably, but dynamic libs ain't one of it.