You’ll still have vulnerabilities in your dependencies.