the Js ecosystem is by far the worst offender in this area