But that wouldn't express what the potential issue is. You want to know that internal changes in which modules could break you, and/or in what way you're expand

But that wouldn't express what the potential issue is. You want to know that internal changes in which modules could break you, and/or in what way you're expanding the security attack surface area. Such a library needs to tell you what "bad" things it does and give you a list of modules whose encapsulation in breaks open that you could put on the command line.