I don't even think micro-packages are that bad. The problems with NPM seem to have been that the "Always upgrade immediately! Upgrades are good for security and

I don't even think micro-packages are that bad. The problems with NPM seem to have been that the "Always upgrade immediately! Upgrades are good for security and have no downsides!" people are winning the PR fight against us "Upgrade cautiously and never allow autonomous upgrades. Upgrades are important for security but they have many caveats" people. One is a more Windows attitude of "I know you've never gotten a virus, but if you don't upgrade, you _will_ get a virus and you _will_ die" whereas my attitude is more of a Linux "The only time my Linux system breaks is when I upgrade it."