npm update just broke my entire project again because some library I've never even heard of had a major version bump. Can't we just freeze dependencies already? #npmproblems