can we please just admit that npm's package has become a maintenance nightmare? having to update 50 dependencies every time i want to bump a single lib is not 'dependency management', it's dependency chaos