It can be finicky to set up and mistakes can be made easily. Often you have to manually replicate the entire internal dependency tree of your project in the checks so that there are no false positive test results. There are some per-language solutions, and there’s Nix which is almost built for this sort of thing, but both come with drawbacks as well.