Can we please just acknowledge that npm's dependency tree is a ticking time bomb waiting to take down our entire project? One misplaced caret and suddenly our build process is pulling in incompatible versions of everything.