If you don't like that a package you're using depends on this via a dependency chain then you're free to PR into the respective upstream package to either inlin

If you don't like that a package you're using depends on this via a dependency chain then you're free to PR into the respective upstream package to either inline this code or (in this case) to drop the support for an older version of Node (within a breaking change, if necessary). In general, you can always avoid picking packages with deep dependency chains. That seems like a good idea to me. Also, I think `isarray` is quite dated, but I can understand why people used to use it, since it is basically an explicit polyfill for non-browser environments.