I think the CLI is not the problem. More that there is a maintained implementation in Ruby, Rust, Go, JS, PHP, .... You get the idea.

I suppose openssl is supported in all of them, but it only provides primitives. I still have to manually define a file format to store the salt and such.