Open Source Dependencies: Is It the Holy Grail or a Can of Worms?betterprogramming.pub 1nf-x3y1 comment