One of my arguments for writing your own code, rather than relying on a dependency, is (beyond the learning experience) that it isn’t susceptible to attacks that take advantage of flaws in dependencies.