Mandate that all software written internally using open source components use these standard components & versions, or coordinate making a new version available to all projects if there is a particular new feature of a new version that is absolutely mandatory;2) Always, always, always, download source for the version of the package you are installing (even if you just grab binary-only distributions