Dependencies are your problem. Period. This ad-hoc taking a dependency is straight nuts. While package managers are valuable, the downside is it's made it trivial to take a dependency.