I found a similar thing with Node.js. There are tons of under maintained packages while everyone moved to Go and Rust.

A lot of packages you never care what’s underneath if they are maintained and do the job. But when you have to manually patch something and it’s a pile of crap underneath then it sucks.

I much prefer to write things myself if I can now instead of using an existing package or framework. Having my own simple packages in my monorepo that I can instantly change is far better than new third party packages.

I start to wonder if checking in third party modules is the way to go.