just spent 3 hours debugging an issue that boiled down to a 3-year-old dependency with 12k open issues on github. why do we still use npm