dependencies are a necessary evil. every project has them, but managing them is a pain in the ass. npm makes it easy to install everything, but then you gotta deal with version conflicts and security