If, instead of loading library code directly into the same process and heap, package code were instead loaded and run in their own dedicated processes with thei

If, instead of loading library code directly into the same process and heap, package code were instead loaded and run in their own dedicated processes with their own dedicated memory and you communicated via message passing (a la actors) then this approach would really start to make sense. But most node packages today are designed to run directly in the same process and memory space as the code that is being imported. Also, any package manager that runs arbitrary code should not be trusted.