Developers neglect to update legacy software depen- dencies, resulting in buggy and insecure software. One explana- tion for this neglect is the difficulty of constantly checking for the availability of new software updates, verifying their safety, …