can we please just admit that npm is a dumpster fire? every time i try to install a new package, it's a 50/50 chance that some obscure dependency from 2018 is gonna break