Idk how I feel about this. I think this is only an appropriate solution if you are 100% capable and can take complete ownership of patching said dependencies.
I get how there is risk associated with a supply chain attack, but what are you going to do when you don't understand a vulnerability and need to fix it?
Most problems aren't impossible to solve of course, but those who've been working with a codebase for a long time probably have a more intimate knowledge of how it works.
I don't know the answer to your question, but have often thought the same thing. I used to have this saying - at some point you have to take the tinfoil hat off and just "live a little." My thoughts is I'd never make a name for myself if people didn't know who I was. Now at almost 34, I just straight up don't care anymore. I'll never "be someone" and I'm too old in tech to be taken seriously by the movers and shakers.
Not sure where I'm really going with this other than I fully understand opsec, the hacker mindset, cyber security, etc, but I've never really cared to stay private because I wanted to be known. Now that I'm likely as good as I'll ever be, it doesn't really matter lol. If someone finds something I said in poor taste, I'll apologize and hopefully have learned from it and move on.
Definitely try out fancyzones from powertoys if you're on Windows. For Linux I'm not really sure, not much of a Linux desktop environment type, but I'm sure there's something for gnome. Lg makes a software I think it's called screen split, but fancy zones is better in my opinion. I run six 34 inch 2k ultrawides. I use the "edges" for stuff on the back burner - main content goes in the middle. It you have the right monitor some ultrawides can split inputs if you have multiple machines/ sources. That could be useful for dual os or work & personal setups.