Cargo tackles none of that, it has the exact same issue of pulling in hundreds of deps like npm has.