Path rewriting means you're distributing modified copies of code, which puts you under significant legal obligation in some cases. npm is amazing for javascrip

Path rewriting means you're distributing modified copies of code, which puts you under significant legal obligation in some cases. npm is amazing for javascript, but terrible for compiled languages and is especially terrible for security updating; the giant mess of transitive dependencies of the same dependency of varying versions can get messy fast.