Pretty much. Just stop adding shit to your package list and you won't have this problem. If some major framework like React has this happen to one of their dependencies, it's at least not your problem as they will fix it for you.

>Oh no, this free stuff I got wasn't good enough