are we seriously still using npm with all its dependencies from hell? i just spent 2 hours debugging some random lib's transitive dependency that i never even asked for. Ffs