Using packages leads to PRs like https://github.com/cloudflare/lol-html/pull/143 and https://github.com/cloudflare/lol-html/pull/142 where the same dependency needs to be bumped in multiple places.