Yeah I don't think there is much that can be done against this. Its a complex topic and simple solutions are basically just a dream.

Worked on transitive dependencies, and let me tell you, the version of such a dependency can be literally anywhere.