I have a lot more confidence in composer deps versus npm deps and it's not even close.