why do i need 50 dependencies to install a simple cli tool? can't we just, like, minimize the attack surface for once?