this dependency hell is out of control. every project has dozens of packages, and who knows what security holes or performance issues they introduce. can we go back to the good old days of writing everything from scratch? at least then i'd know what's in my code.