Clearly this is insane - but what the solution? Part of the problem, in my opinion, is that packages are not subject to any review process. These dependency c

Clearly this is insane - but what the solution? Part of the problem, in my opinion, is that packages are not subject to any review process. These dependency chains get out of hand because they are rarely top-of-mind.