I feel like there are more options between “npm” and “os package manager”. For the cargo example, I feel like namespaced packages could avoid the namesquatting

I feel like there are more options between “npm” and “os package manager”. For the cargo example, I feel like namespaced packages could avoid the namesquatting typo issue. Also, I see no reason that verification or auditing can’t be built into these “overlay” package managers. I believe crev https://web.crev.dev/rust-reviews/ https://web.crev.dev/rust-reviews/ was trying to solve this in the Rust space.