can we please just standardize package management already, updating dependencies is still a crapshoot