> Call me crazy, but... I don't add things to my projects without looking at the source. This is manageable when you are using Packagist, this is manageable wh

> Call me crazy, but... I don't add things to my projects without looking at the source. This is manageable when you are using Packagist, this is manageable when you are using Maven, where all dependencies are flat. When compatibility issues arise they have to be dealt with upstream. This is NOT manageable when you are using NPM that will go fetch 30 different versions of the same package because crazy dependency resolution. This is not a JS issue like people claim here, this is 100% a NPM issue because whoever designed this was too busy being patronizing on Twitter rather than making sensible design decisions.