The obvious solution to all this mess is to make libraries ship source code instead of compiled blobs of whatever.

Maybe there is a reason for this absurd choice that they don't even consider changing, but I can't see it.