Or you neglect updating them and get bitten by a missed security update, either just the rush to update (and potentially deal with breaking changes and other is

Or you neglect updating them and get bitten by a missed security update, either just the rush to update (and potentially deal with breaking changes and other issues that come from not having done so in a long while) worse because it actually affects your projects instances in the wild.