This is the catch with Bazel. All of its integration with npm, pypi, crates.io, etc are hacks that essentially vendor the source of your dependencies and attemp

This is the catch with Bazel. All of its integration with npm, pypi, crates.io, etc are hacks that essentially vendor the source of your dependencies and attempt to generate BUILD files for those deps with some heuristics. For a lot of packages the heuristics work, but not all. Ultimately bazel needs you to vendor and hand-maintain BUILD files to get a seamless experience.