1. A method comprising: collecting, from a plurality of target deployments that follow changes to a software image, data that identifies a set of source components from which the plurality of target deployments are run; comparing a set of signatures including a hash value generated from digest information that describes the set of source components, including at least a base version of a software system and a set of patch information applied to the base version of the software system, from which the plurality of target deployments are run, to at least one signature generated based on a recommended set of source components for a plurality of active versions of the software image, the plurality of active versions of the software image including at least a first version of the software image that reflects currently recommended source components and a second version of the software image that reflects previously recommended source components; responsive at least to comparing the set of signatures generated from digest information that describes the set of source components, including the set of patch information, from which the plurality of target deployments are run, to the at least one signature generated based on the recommended set of source components from the plurality of active versions of the software image, presenting: (a) a first subset of one or more target deployments of the plurality of target deployments that include at least one source component that is not a currently recommended source component or a previously recommended source component reflected in the plurality of active versions of the software image; and (b) a second subset of one or more target deployments of the plurality of target deployments that are run from the currently recommended source components; and reconciling at least one target deployment in the first subset of one or more target deployments with the second subset of one or more target deployments.