Comment by get

    what's the better way to do it
    copy & paste, or use a package manager 

When you add a dependency, how do you prevent the maintainer of the dependency or any sub- or sub-sub-...dependency to break your system in the future?