why is the javascript so reliant on a million tiny packages? it's a nightmare trying to keep up with all the dependencies and security issues.