Once you start using an npm package you are likely screwed