just spent the last hour debugging a production issue only to find out it was a silly version conflict with a transitive dependency... can we please just make npm not awful yet?