can't believe i just spent 3 hours debugging an issue caused by a transitive dependency that's been abandoned for 5 years. npm is a freaking landmine, who thought it was a good idea to let anyone publish anything?