How do you decide how much money to allocate to a dependency? Especially in ecosystems like NodeJS where there are 1000s of dependencies for a single project. And most of the dependencies are very small, does trivial things but is used by a vast number of packages.