This is something JavaScript does better than Rust. I like the JS community because it's way more sympathetic on average. They have lots of code quality issues to solve in some of the hardest ways... But people are working on that, and I think they will succeed eventually, if they haven't already fixed much with npm audit.