> One of the practical outcomes of this trope is people trying to solve this problem in narrow, ecosystem-specific, non-portable ways. In general I agree, but

> One of the practical outcomes of this trope is people trying to solve this problem in narrow, ecosystem-specific, non-portable ways. In general I agree, but I disagree that conversations about dependency scopes are ecosystem-specific. Frankly, figuring out how to limit the capabilities of imports is a discussion that literally every language with a package manager should be having right now. Sure, the implementation is always going to be platform/language-specific, but this should be a serious consideration that people have any time that they're designing a new package system, we should expect new package managers to have an answer about how they scope dependencies and handle dependency permissions.