https://vulert.com/blog/dependency-management-strategy-retain-equilibrium/