If you don&#x27;t share common dependencies you&#x27;re doomed to have security hazards.<p>Consider it this way: if you install package FOO with its dependencies A,B and C, and FOO&#x27;s developer thinks it&#x27;s &quot;feature complete&quot;, the package will never be updated, but every time a vulnerability is disclosed in his dependencies you&#x27;ll be it. For _every_ program maintained this way.