It is up to the software community to fix this, large industry players are not going to fix this, governments are not going to fix this, ECMA/WC3/ANSI are not going to fix this.
From the largest to the smallest, the software community has three choices:
1. Keep using an even more fragmented pyramid of software packages, "hoping" for no issues
2. Slowly, systemically reducing the number of software packages you use
3. Resetting the common standards HTML, JavaScript, HTTP, more so that they are much simpler with a lot less need for many layers of 'fixes' to make them workable. Included in this is resetting the commonly used patterns, architectures and inherit fragmentation they present both on server or in the cloud.
Yet another layer or Yet another library is how we got here.
The only solution presented by large software companies is creation of a 'trusted' registry of libraries which does not address the fragmentation and keeps any effort at simplification and security away from those same large software companies.
The path forward may be replacing scripting languages, type-less languages and everything is a dynamic object languages (JavaScript, Python) with compiled beforehand and type checked beforehand languages.