npm is such a fucking nightmare. all these dependencies and supply chain attacks waiting to happen. you can't trust any of this shit. i'm just trying to write some code, not worry about securing the entire internet.