to be pedantic, the problem with all these npm dependencies isn't the number, it's the lack of transparency and accountability. how am i supposed to trust the security and maintenance of my project when i'm pulling in 500 random packages with no clear oversight? source?