Open the package.json of your admin dashboard and count the dependencies you deliberately added. Then run npm ls --all and count what is actually there. For a typical React admin template the second number lands somewhere between eight hundred and fifteen hundred packages, and you personally selected maybe thirty of them. The rest arrived uninvited, and every one of them runs with the same access to the page as the code you wrote yourself.




