@wpbasti Inshort,transitive dependency management (which many scripting languages have) is not the same as performing control flow analysis