First rule of un-curated package managers: pin your dependancies. (and check for typos!)

And every time this happens I will ask for the same thing, I want a platform that has library level isolation and fire-walling.

Also could all PAASs please implement outbound firewalls, I cannot understand why it's not a standard feature.