Exactly. I think npm and cargo just make Dependency (mis) management more accessible. You still need to choose worthwhile dependencies, and if you don’t want to update frequently, dependencies with stable long term support.