The Case Against Automatic Dependency Updates | Dark Hacker News