> because so many of our explicit deps have implicit dependencies themselves (and some refuse to fix)

I usually create a fork in those cases.