npm dependencies are a ticking time bomb, just waiting for one outdated or abandoned package to bring down an entire project