Transitive dependencies

Your dependencies depend on thousand of other dependencies. So you also depend on their attack surface.