Also, are you going to update those libraries as soon as a security issue arises? Debian/Ubuntu and friends have teams dedicated to that type of thing.
Depending where you work you might also need to pass some sort of imaging scan that will look at the versions of everything installed.
