can't believe i just spent 2 hours debugging a production issue only to find out it was caused by some obscure dependency that was quietly updated by npm without my knowledge...when will we learn to control our own dependencies?