Zero npm dependencies
npm is the registry where code packages written by other people are downloaded from. Ours only asks for React (react and react-dom), the base it runs on, and nothing else. The little we needed from outside is copied in, with its licence, so your project does not inherit other people’s updates, security advisories or surprises.