Creating a ticket plus confluence page for every open source library I want to use to get approval to use it. Of course only to allow usage of the minor version, so in js Land the request is outdated after 2 days, before someone had to chance to approve it.

Creating one to keep track of each library, or even each major version, is a pain but often not unheard of, and stops dependency hell and everyone adding libraries for the sake of it.

Every minor version is nuts though, and seems like you'd just be missing out on a bunch of security stuff...