Open Source Dependencies: Is It the Holy Grail or a Can of Worms? | Dark Hacker News