Other areas don’t, which keeps switching costs high. Dependency graph APIs vary by platform, vulnerability scanning integration is proprietary per forge, Dependabot and Renovate each have their own config format, and package metadata APIs differ across registries.
Areas that do not have (de facto) standards, meaning high switching costs: dependency graph APIs vulnerability scanning integration package metadata APIs are all different.