[rcxdude]

The way to guarantee that is to pay one of those cybersecurity firms, that's basically their business.

And the most effective strategy is to audit and review your dependencies and any updates to them. That probably constrains how many you can have, but just minimizing them is reducing the size of the target, not protecting it per se.