Re:Netmask NPM package, used by 270k+ projects, vulnerable t...
by mikepurvis on Monday March 29, 2021 @09:54AM
(#26621573)
Well yes, but the point is that everything in the stdlib receives scrutiny and a long-term commitment to mainenance/upkeep. A small proportion of pypi/npm receives these things, but the vast majority is abandonware trash. You only have to briefly scroll through the main PyPI index to realise just how awful it is:
https://pypi.org/simple/ (caution— multi-megabyte html)