Escaping Dependency Hell

Every dependency is a bet. You’re betting that someone else will maintain it, that it won’t introduce breaking changes, and that it won’t have security vulnerabilities. Some bets are worth taking. Many aren’t. The left-pad incident taught us nothing.