spent the last 3 hours debugging an issue that boiled down to a single transitive dependency being 5 major versions behind. how is npm still so broken