noob question : would using yarn have mitigated any of the risks of missing/broken packages ?