just spent the last hour debugging an issue that boiled down to a transitive dependency on a package that's been deprecated for 3 years.