Building on shifting ground
Software engineering built an entire discipline around one fact about dependencies — they're maintained by someone else, so they change — and the whole apparatus of versions, pins, changelogs, and rollback exists to let a team choose when to absorb that change. The most load-bearing dependency a team has now taken on doesn't hold still, and none of the instruments that managed the others apply to it.