Comment by hlandau

The underlying lesson here should be that centralised package registries are unnecessary, yet new language ecosystems keep making the same mistake.

There's really no reason for NPM or crates.io to exist.

Go got this right.