I agree, but imo the Rust ecosystem has the same problem. Not to the extent of NPM, but worse than C/C++.