can't believe how many people still don't understand the concept of transitive dependencies. npm is a security nightmare, and it's only a matter of time before a major vulnerability gets exploited because of some