OS distributions have package managers and package repositories that have maintainers who are mostly decoupled from the developers. So that takes care of the qu

OS distributions have package managers and package repositories that have maintainers who are mostly decoupled from the developers. So that takes care of the quality/security problems that arise in ecosystems like Node.js. There is also C. The tooling and the "package manager for C++" would be expected to seamlessly work for C and be expected to be accepted and used by the C community. (personally I use CMake + OS package manager)