News for hackers. Stuff that matters.
Re:NPM – "is-even", 160k weekly downloads by tyingq on Tuesday November 16, 2021 @12:19PM (#29243290)
Oh, that's awful. It depends on ansi-wrap (another pretty much 1-liner package) with 2.6M weekly downloads.

Is there a site or code snippet where I can see which of the popular dependants was fooled into using this crap and is driving most of the downloads?

Re:NPM – "is-even", 160k weekly downloads by phist_mcgee on Tuesday November 16, 2021 @01:53PM (#29244821)
`npm ls <package_name>` or `yarn why <package_name>` is a good start for figuring out how a package ended up in your node_modules
Re:NPM – "is-even", 160k weekly downloads by tyingq on Tuesday November 16, 2021 @02:25PM (#29245233)
Sure, I was looking for the opposite...which popular node package is pulling in ansi-wrap.
Re:NPM – "is-even", 160k weekly downloads by jcuenod on Tuesday November 16, 2021 @02:44PM (#29245468)
Re:NPM – "is-even", 160k weekly downloads by jcuenod on Tuesday November 16, 2021 @02:52PM (#29245572)
I think that is sorted. If you go to the first result for `ansi-wrap` -> `ansi-gray` -> https://www.npmjs.com/package/fancy-log ("Log things, prefixed with a timestamp." by other creators: 2 398 259 weekly downloads)
Re:NPM – "is-even", 160k weekly downloads by tyingq on Tuesday November 16, 2021 @02:57PM (#29245646)
Ah, yep...thanks. So we know where this particular bit of madness could be fixed.
Re:NPM – "is-even", 160k weekly downloads by tyingq on Tuesday November 16, 2021 @02:48PM (#29245525)
Close, though sorted by popularity/downloads is really what I wanted...how to find where all the downloads are coming from.