I thought someone happened in pip the other year.

Part of the NPM issue is that everything gets atomized into tiny libraries and no one seems to care about the dependency explosion.