npm just installed 300MB of dependencies for a 1KB plugin. where's the outrage?