They should be in separate packages so you won't force yourself to patch CVEs in the parts you don't use?