with all the potential vulnerabilities of 400 npm dependencies (I'm guessing. It's probably higher)