How many dependencies do you review the source code of?

Or put the dependency in the unit tests so it's not part of the code base but able to be compared to the canonical implementation.

On the negative side, the code may not work.

But on the positive side, no dependencies.