Here's a crazy idea: remove all semver-compatible duplicates!
If your top-level module uses [email protected] and a dependency
uses [email protected], npm-semver-dedupe will simply remove [email protected],
even if it explicitly wants v1.0.0.
Yes, this might break your app. Yes, this is very hacky.
However, duplicates suck and so does npm dedupe.
You don't need 20 copies of the same version of esprima in your app.
If you run this, you better test your app afterwards because something is very likely to break!
npm i -g npm-semver-dedupe
npm-semver-dedupe
This will dedupe the current app/module.