npm is such a joke. i just spent an hour troubleshooting a package that was breaking my app because some package maintainer decided to "upgrade" their deps to the latest version of another package