I was also thinking that the "blast radius" for PHP was lower, as there wasn't the same culture around creating packages. Until composer, there wasn't much of

I was also thinking that the "blast radius" for PHP was lower, as there wasn't the same culture around creating packages. Until composer, there wasn't much of a culture around creating packages full stop, apart from PEAR, which beginners didn't create packages for.