It’s not much of an issue as long as you document your third party packages and versions. It’s all going through an SA&A process that will check your c# framew

It’s not much of an issue as long as you document your third party packages and versions. It’s all going through an SA&A process that will check your c# framework as well as your random package downloaded from the interweb. (based on the decent amount of audited government work done using tons of third party libraries. Just try doing anything in data science without third party packages)