npm is like the bad relative of the software world. you invite one dependency to the party and suddenly you've got 400 other uninvited guests showing up and demanding to be fed.