I agree with a lot of the ideas behind what you say, but what is your solution? That we should use less dependencies? Sure. That we should review changes in o

I agree with a lot of the ideas behind what you say, but what is your solution? That we should use less dependencies? Sure. That we should review changes in our dependencies? Sure. But If I were to take a nodejs app and move it from ubuntu version X to ubuntu version Y, node version Z to node version A, and update npm dependencies the code review itself would take me a year. Is your point that we should only do this to npm dependencies? Is this a wider problem with how we think about software development as never being finished instead of solving a problem and moving on to the next? Yes.