Can we get the benefits of transitive dependencies without undermining security?tratt.net·85 pts·ltratt·87