[saagarjha]

See, one way I often solve this is by reducing my reliance on third-party dependencies.

[Draiken]

Which is also a hard thing to do on small teams.

I think for small teams this is a near impossible task. For big corporations it should be doable and expected. They actually have some leverage to push the other big companies to track less. Something a small company simply can't do.