“If you're not constantly updating your code to use new and newer versions of those components as a best practice, it's very hard for organizations to respond when they absolutely have to do a 24-hour turnaround to mitigate something.”

Transcript evidence from Steve Springett -- Dependency Check and Dependency Track.