I write this as someone who fully hates npm and javascript, but it's not even a package manager issue. The issue is that someone gets hacked and their credentials get stolen. This could happen to any ecosystem, it's just more likely to be beneficial if you target JS because of ubiquity.
People would need to develop entirely new credential management protocols to circumvent this and they'd probably be risky to automate to the same degree of convenience that we have now so, unless you're looking to spin up containers for each and every step of development or, god forbid, write/vendor your dependencies it's actually not easy at all to prevent this sort of thing.
Might like Nushell. It's modern like powershell but more in line with standard unix workflows. If you just want a proper unix-like experience git-bash will cover the basics. Msys2 will offer a package manager in the style of Arch's pacman. You'll probably want cygwin at some point for installing other things it it has its own shell too.
If all else fails, just use a subsystem for your preferred linux distro.
Which are great things for prototyping but, for distributing things, virtual environments (or unversioned/tagged dependencies) and 3rd party package managers are a finnicky and brittle hurdles that make the end user's lives worse. What's more is that, without a legitimate type system, long term maintenance becomes a recurring pita. Exceptions are also problematic in that they blow up stacks of dependent computation rarely shrink over time without extensive rewriting. It's also still a relatively slow language, which should be disqualifying for a performance sensitive project like this.
Doesn't even need to be as tough as rust; There're languages that're as easy to write. Go, for one, supports iterative workflows (there're some community repls which, sadly, are usually versions behind but the compiler is very fast) and garbage collection and makes distribution/acquisition trivial. There're versions of it that are more script-oriented and even have generator expressions and other declarative syntax features.
I understand tge appeal, and benefits, of prototyoing in python but it is not an appropriate medium/format for the distribution of something this important.
They're large enough to ban alternative providers from mailing their servers and see little in the way of puahback. But I agree that the future lies elsewhere. Recently started moving email to disroot.org.
How did you get into that? Feel like I never see a listing for those kinds of gigs when I look for jobs online, but a lot of my personal projects came out of acquiring and managing porn, lol.
It's harder to maintain a spiritual monopoly if you allow other games to be played in town. And since you're kicking them out, why not keep their land instead of trying to haggle with someone else for a deed?
The Korean version of hellboy was pretty good if you're in the mood for a mindfucking.