Re:NPM – "is-even", 160k weekly downloads
by phist_mcgee on Tuesday November 16, 2021 @01:53PM
(#29244821)
`npm ls <package_name>` or `yarn why <package_name>` is a good start for figuring out how a package ended up in your node_modules
Re:NPM – "is-even", 160k weekly downloads
by tyingq on Tuesday November 16, 2021 @02:25PM
(#29245233)
Sure, I was looking for the opposite...which popular node package is pulling in ansi-wrap.
Re:NPM – "is-even", 160k weekly downloads
by jcuenod on Tuesday November 16, 2021 @02:52PM
(#29245572)
I think that is sorted. If you go to the first result for `ansi-wrap` -> `ansi-gray` -> https://www.npmjs.com/package/fancy-log ("Log things, prefixed with a timestamp." by other creators: 2 398 259 weekly downloads)
Is there a site or code snippet where I can see which of the popular dependants was fooled into using this crap and is driving most of the downloads?