“If you do try to do a forklift-style upgrade where you're taking an old version of software that is vulnerable and replacing it with a more modern version, it's going to break all the API connections and other things that were happening there.”

Transcript evidence from Steve Springett -- Dependency Check and Dependency Track.