Besides, projects with lots of dependencies are taking on more risk than they realize. If one dependency gets compromised, you have no idea how many projects ar

Besides, projects with lots of dependencies are taking on more risk than they realize. If one dependency gets compromised, you have no idea how many projects are affected until it's too late.