Two opposing strategies for dependency update management | Hacker News Reader