another day, another project held hostage by a single, poorly maintained dependency on npm. when will we learn that the "rich " of tiny. Interconnected packages is just a euphemism for "single points of failure waiting to happen"?