we turned it off because someone convinced us we wanted to manually manage our deps, but in hindsight that was a terrible idea