(2) The python third party ecosystem is the wild west (still), and trying to impose proper order on it is a nightmare. When someone writes a proper generic transitive dependency resolver with good pluggable heuristics--a problem which I'm convinced is tractable but very hard--then I think it will be easier, but even then there are always going to be old or just bad deps in terms of how they pin their transitive graph