How many of these stories do we need to hear before we start treating this problem seriously?

I'm not saying never use external libraries.

But recognise that each one of them is a potential ticking time bomb. Do you really need it, or is it a nice to have?