>2 months later I clone and start the project and everything breaks. Oh, X and Y libraries decided to fuck everything

Are you not using semver? A common mistake I've seen is to depend on the "*" or "latest" version of a package, which obviously will break when the package releases a major update.

Also, applications should use shrinkwraps to pin their dependency versions to versions they've been tested with.