The problem is that it also is a vulnerability multiplier. People used to understand every package the installed. Now, they install dependencies of dependencie

The problem is that it also is a vulnerability multiplier. People used to understand every package the installed. Now, they install dependencies of dependencies of dependencies, to the point that they have not even SEEN the name of most of their dependencies. Install anything with maven and count the number of packages installed. It is appalling.