Unpopular take on NPM:
NPM is a very good package manager registry. It's just extremely popular because javascript is extremely popular and the entry barrier is tiny compared to other languages and registries.
These issues would pop up in any package manager, no matter the language, you just need enough users and usecases.