can we please just acknowledge that npm's dependency graph is a ticking time bomb? how many transitive dependencies does your app really need??