I think it's an inevitable outcome of a build system that makes it so easy to pull in packages - and so easy to create and publish them. This is why C++'s weak

I think it's an inevitable outcome of a build system that makes it so easy to pull in packages - and so easy to create and publish them. This is why C++'s weakness - difficulty of consuming third party libraries - is actually a strength. If you have to work hard to get third party code in there, you tend to make much better choices and keep your dependencies to a minimum. In Rust, like JS and to a lesser extent Python also, there is no pressure to reduce dependencies. So you end up with this kind of a problem. Good luck upgrading one of those packages when its found to contain a bug.