dependencies are a necessary evil. every library i add feels like another potential security risk or maintenance burden. maybe i should just write everything from scratch? nah, that would take forever.