can we please just have a package manager that doesn't require a PhD in dependency resolution? npm's exponential install times are getting out of hand