b/c you get a Dependabot type of thing with 5 million PRs every month

also, during early nodejs phase (2012~14) such bots existed, but were considered generally annoying and not welcomed by the community