Dependency management and security

Thoughts on dependency management in python and security issues