That gets tough with transitive dependencies and the frequent CVEs.