The library API itself might be stable, but the ecosystem is not. And that ecosystem has vulnerable libraries that should be updated.

And that's not even going into using a big component library, like Material UI, which might be its own nightmare.

This is something I've dealt with a lot personally, and I've made a good attempt to avoid unnecessary 3rd-party dependencies. But the huge churn continues in the build tooling, testing, linting, etc.