assuming your codebase is ok with an MIT-licensed dependency suddenly becoming a GPL-licensed dependency.