npm's dependency hell is getting out of hand, can't we just use a decent package manager for once?