Pretty regularly. Every situation is different but generally I just ask myself; Is the code-base sane enough / do I have the skills to patch or re-write it my

Pretty regularly. Every situation is different but generally I just ask myself; Is the code-base sane enough / do I have the skills to patch or re-write it myself if things go sideways? Would I have written this anyway? If yes, then I put a small abstraction layer between the api and my code, then put it through my vetting processes. The questions I ask typically goe with any library, not just a pre-release. But the abstraction layer I'll often omit if it's a package that's been around for a while.