this dependency hell is getting out of control. every new library i try to use has 50 transitive dependencies. it's become impossible to audit and secure my codebase.