Here's what bites me and many other CPAN authors: forgetting to list that one dependency. Maybe you think it's core. Maybe you forgot to add a module you threw in at the last moment. Maybe some dumbass named Ovid forgets to take out the call to Data::Dumper::Simple that he threw in there for debugging (yeah, that was embarrassing).
I'm trying to think of the best ways to handle this.