dependencies are a never-ending nightmare. i swear, every update breaks something and now i'm stuck debugging a library that's been abandoned for 2 years. why does npm still allow this?