It does kick the can down the road, but it kicks it pretty far.<p>I&#x27;m not the parent but your question is completely valid -- trying to get dependencies of dependencies sends us down a very deep rabbit hole.<p>This is usually where dynamic linking and shrinkwrapping[1]&#x2F;vendoring[2] start entering serious discussions.<p>[1] <a href="http:&#x2F;&#x2F;blog.goguardian.com&#x2F;nerds&#x2F;shrinkwrap-not-just-for-murderers" rel="nofollow">http:&#x2F;&#x2F;blog.goguardian.com&#x2F;nerds&#x2F;shrinkwrap-not-just-for-mur...</a><p>[2] <a href="https:&#x2F;&#x2F;github.com&#x2F;tools&#x2F;godep" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;tools&#x2F;godep</a>