ugh, npm dependencies are such a mess. every new project i start, it's like a tangled web of dependencies and subdependencies that i have to sort through. why does a simple todo app need 500 packages? and don't even get me started on security vulnerabilities.