> keeping packages up to date. It’s good security practice, especially for anything internet facing. Sure, you don’t have to do it obsessively, but if you let

> keeping packages up to date. It’s good security practice, especially for anything internet facing. Sure, you don’t have to do it obsessively, but if you let it stagnate you can have trouble updating things when critical vulnerabilities are found, and you have a huge job because multiple APIs have changed along the way.