Why Manually Tracking Open Source Components Is Futile | Dark Hacker News