Basically it was a two liner dependency and how npm works it doesn’t cache and always downloads all dependencies fresh. This lead to 440GB/Month of traffic in a lage project.

Instead of removing a dependency we should just accept that the entire JS ecosystem is a total ****show and start over