PyTorch and the PyPI supply chain

I wonder if that is because the Perl community learned the lessons the hard way. I spent way too much time in the late 90's and early 00's fixing 1 am outages to undo some developer's 'grab the latest from CPAN' which 'fixed' whatever bug they had but added 200 new ones in a myriad of dependencies (or my favorite.. why is the perl on each web server or application different? Oh because each team of dev's did a CPAN update and compiled a new version as part of that..) Things became more stable after that... but I also was dealing with perl less and less because various web devs I worked with were finding it 'too stodgy' and moving to Ruby, Python and then Node because speed in module changes were there.