dependencies are a necessary evil. every package you install just adds another layer of complexity and potential issues. but what choice do we have?