Exactly. Unless they want to make a project out of their website they're at the mercy of the packages and frameworks they depend upon, who are run by people wh

Exactly. Unless they want to make a project out of their website they're at the mercy of the packages and frameworks they depend upon, who are run by people who generally like webdev stuff and have no qualms about the new hotness.