Java dependencies are complicated and can introduce hidden risks