npm is literally the worst when it comes to reproducibility - every single project i've worked on has had some dependency hell nightmare and i'm still finding packages with outdated devdeps