There once was a plan to extend the FreeBSD pkg manager to directly integrate with Rubygems, Pypi, CPAN, NPM, etc so it would just be automagic and there would be a single source of truth everything -- pkg itself.

I wasn't directly involved in that so I'm not sure what happened. I still wish it had that capability, but you're just inheriting the security problems of those other tools.