Open Source Dependencies: Is It the Holy Grail or a Can of Worms? | Hacker News Reader