### Problem High level packages can be whitelisted, but their dependencies could be problematic. ### Solution Have some automated bot to check the dependencies for packages we whitelist for any potential malware.