> Unless you're doing something mathematical, where you can exhaustively test every input and output and ship something that's essentially close to the platonic

> Unless you're doing something mathematical, where you can exhaustively test every input and output and ship something that's essentially close to the platonic ideal of the thing, you're going to need to update. You only need to update dependencies that interact with things that change autonomously. For the types of programs I write, that describes very few, sometimes none, of my dependencies. Continuous updating of dependencies is valuable in some circumstances. Not all.