They also tend to act as "trust middlemen" by maintaining relationships with top developers. And providing tooling to help manage quality and standardize things like versioning or lifecycle management or security checking.
I know package management feels like a technical failing. In some ways it is.
But package managers are not trying to fix a purely technical problem. They're also trying to fix this very human problem of contracts. //