People complain about the web build tool chain, bundlers, rollups etc.
And it has been and probably still is pretty stupid.
But at least you can pin and deploy all your dependencies before deploying.

This highlights why pulling in scripts at runtime from sources you don’t control is a worse idea