any package that depends on a <s>deprecated</s> package may, unknowingly, become vulnerable itself.

Fixed it.