FWIW, I work in security and this skill is becoming very well automated in that domain. It's imperfect (and always will be), but there's a large overlap betwee

FWIW, I work in security and this skill is becoming very well automated in that domain. It's imperfect (and always will be), but there's a large overlap between manageable libraries and securable[0] libraries. [0] In the software-composition analysis field, "securability" is not only about upgrading vulnerable libraries but also about how many vulnerable transitive dependencies you may have to upgrade in future.