Analysis tools that show where large transitive dependencies could be avoided would help. Right now there is no feedback to encourage people to not have HUGE l

Analysis tools that show where large transitive dependencies could be avoided would help. Right now there is no feedback to encourage people to not have HUGE lists of dependencies. And for trivial reasons. This compounds the problem hugely. If you have three dependencies, verifying is feasible. If you have 3,000, it is not.