But you also have to review the diffs of your dependency's dependencies. And their dependencies. And so on and so on.