One security alert changed how I think about dependencies

· Dev.to