Also, lest we forget, the site designer.
Most folks are unaware of the things that can happen, when a Web designer loops in a dependency.
The dependencies tend to bring friends. Lots of friends.
I'm not sure what the answer is. Many, many folks are incapable of designing sites without the dependencies, and these dependencies often add great value, so "don't do that" isn't really an option.
It's easy enough to say "set up a licensing board," but these tend to be a cure, worse than the disease. Incumbents will use them to prevent competition, and governments like to use them as a private piggy bank, like red-light cameras.
Paying for the dependencies makes sense (if I make my living on something, it’s only natural that I pay for my tools and raw materials), but the chains can be long, and there can be many parts that simply cannot be paid for, or will get stolen, or corrupted.
I think that we need to figure out some way to improve the dependency space, but there's no simple solution. Anyone claiming there is, is trying to sell something that is maybe a bit past its "sell by" date.
"There's always an easy solution to every human problem; Neat, plausible and wrong."
"The fact that I have no remedy for all the sorrows of the world is no reason for my accepting yours. It simply supports the strong probability that yours is a fake."
-H. L. Mencken