Think of the problem as a bill of materials. Knowing the origin and that all the components of a part are fit for purpose is important for some applications. I

Think of the problem as a bill of materials. Knowing the origin and that all the components of a part are fit for purpose is important for some applications. If I am making a small greenhouse i can buy steel profiles and not care about what steel are they from. If I am building a house I actually want a specific standardized profile because my structure's calculations rely on that. My house will collapse if they dont. If I am building a jet engine part I want a specific alloy and all the component metals and foundry details, and will reject if the provenance is not known or suitable[1]. If i am doing my own small script for personal purposes I dont care much about packaging and libraries, just that it accomplishes my immediate task on my environment. If I have a small tetris application I also dont care much about libraries, or their reliability. If I have a business selling my application and I am liable for its performance and security I damn sure want to know all about my potential liabilities and mitigate them. [1] https://www.usatoday.com/story/travel/airline-news/2024/06/14/faa-boeing-airbus-titanium-investigation/74101769007/ https://www.usatoday.com/story/travel/airline-news/2024/06/1...