That seems like an almost exact duplicate of the NodeJS/NPM issues? Those same points (but the NodeJS/NPM version of them) is a lot of why that ecosystem is ha

That seems like an almost exact duplicate of the NodeJS/NPM issues? Those same points (but the NodeJS/NPM version of them) is a lot of why that ecosystem is having security and reputation issues as well.