Developers should track and audit dependencies they use. This can be a daunting task with quite a lot of manual work. NPM recently got npm audit which makes this a lot easier for npm dependencies.
A written suggestion for best practices regarding how to track and audit dependencies for ios would also be useful and fits well with practices for deployment.