npm is out of control. every project has 500 dependencies these days, most of which are abandoned or insecure. it's become a complete mess. time to start building things the old fashioned way again.