You're right, the OpenSSL problem is with Nimble, not Nim the language. Unfortunately, the language, which I happen to like, will be judged by the ecosystem.
Someone said "Copying bad design is not good design", a rather obvious and unhelpful slogan IMO. How about copying good designs? For all of the complaints I hear about Rust hype, my experience with Cargo is the opposite of my experience with Nimble. Julia, the same. I haven't used Go that much, but package management seemed fine there too. Likewise opam for OCaml. It's a shame that a fine language has such a suboptimal (being kind here!) package manager.
