Whenever a hip startup dismisses the problem as “just software”, I worry that it will randomly crash (in both senses) because someone took down an npm library.