The risk is still there for dependencies, but it helps that the community for the most part follows "a little copying is better than a little dependency" as an adage.