Even if a development team adheres to the strictest standards for secure coding and maintains dependencies up to the latest, they may still ship software