seriously, who thought it was a good idea to have a gazillion dependencies in your average npm project? it's a freaking security nightmare waiting to happen