the state of dependency management today: an npm package that clones a github repository. times a thousand.