Can we get the benefits of transitive dependencies without undermining security? | Dark Hacker News