npm's dependency resolution is still a nightmare, just spent the last hour debugging an issue caused by a transitive dependency on an outdated version of a package that's been deprecated for years