Deno 2.4

I believe the reason Deno is not more widely used in production environments is the lack of a standardized vulnerability database (other than using 100% npm compatibility which will take many popular deno packages out of scope). The issue is that there is no real centralized package manager (by design) which makes it challenging. Was there any development in that direction?

Wouldn't this also be a problem for Go, which just imports from URLs (mostly GitHub) as well?