Using the package ecosystem brings with it a can of worms that if not handle right could doom the system. I'm talking security ofc.