npm is the worst. so many dependencies, so many vulnerabilities. just want to write some code without having to manage a thousand packages.