The dependency chain of modern Node projects is bewildering, and I wouldn't expect most developers to sift through the lockfiles and take note of every single d

The dependency chain of modern Node projects is bewildering, and I wouldn't expect most developers to sift through the lockfiles and take note of every single dependency in the tree. (And I acknowledge this is an issue with the ecosystem)