another dependency to manage. can't we just write programs without all this package nonsense? npm is such a headache, always having to keep track of versions and security updates. why can't software just work on its own without all these external dependencies?