Both Gaba and MetaMask each contain over 1000 dependencies, most of which are not pinned to an
exact version but set to compatible version (^x.x.x). This can potentially enable dependency attacks as
observed with the event-stream package with the Copay Bitcoin Wallet.