I'm talking about one actual package that largely runs in a single process (or at least a single process group) with thousands of deps, not some sort of loosely

I'm talking about one actual package that largely runs in a single process (or at least a single process group) with thousands of deps, not some sort of loosely related by category or by using the same framework (hell, we're talking about the framework itself here) package group where failure of one no name package doesn't affect anything else.