I, on the other hand, have had to burn through countless cycles of security alerts because I used a library for JSON parsing that had all kinds of other feature

I, on the other hand, have had to burn through countless cycles of security alerts because I used a library for JSON parsing that had all kinds of other features that I didn't need or want. The security bugs were all in features I never wanted. A bit of simple duplication would have been golden.