seriously, who thought it was a good idea to have a package manager that makes you choose between being stuck on an outdated version or risking a cascading disaster every time you update one dependency?