we use npm. one of its limitations is it can only reference a single version of any given dependency.