Also safer, in the sense that as things currently are, our code can be potentially affected by dependencies of deeply chained pom.xml dependencies floating out in open source land.