npm's package.json dependencies are still the biggest source of frustration in development, when will we just use static manifests like every other field?