and facebook has an external package manager (yarn) that seems to do things very much in alignment with monorepos and frozen deps