Look for deps that are small and could be pulled into the code base

[designfrontier]

or really any that look like they might be risky, because of low maintenance, low usage, low engagement, etc.

Would be nice to keep that sort of dependency out of the code base.