Dependencies clashing is not always a binary thing. If they're well-specified, there may be a way to meet everything's version specifications.

Anyways, this isn't just academic. Tools to enable you to specify dependencies without vendoring them have been developed and used in several different environments, and at no point in using any of them have I gone "Gosh I wish I could go back to cluttering up my version control with other people's code!"