In secure software design and development, what is meant by dependency vulnerability management?

A. ignoring security advisories B. never updating libraries C. using abandoned packages blindly D. tracking and fixing vulnerable libraries and packages