It's not just client-side npm though. Rust has the same problem.

Edit: and, ofc, what we're discussing here is Linux packages.