[ohcmon]

> you lose the code that has been battle-tested

I agree that this is still the most important thing, and I don’t try to challenge this.

At the same time we have quite adopted bumping our dependencies when it does not incorporate breaking changes (especially if there are know security vulnerabilities) — and my point is exactly about it, why even simple renames, extraction or flattening or other simple changes have to be treated so differently than internal changes that do not touch public interface?