Rust from this sounds like npm or any other similar system. You end up with dependencies that have dependencies and so on. A project can quickly end up with massive amount of code that is unauditable and probably not used.

The best you can do is be careful when changing versions and, more importantly, only use external dependencies that you actually trust and need.