npm is a ticking time bomb, one day we're gonna wake up and half our projects will be broken due to some obscure dependency 5 levels deep that's been hijacked or abandoned