[AnIdiotOnTheNet]

Show me an implementation that doesn't have these problems, because I've yet to see one. That's not surprising though, since once you've solved these problems you don't need a package manager.