News for hackers. Stuff that matters.
Re:NPM – "is-even", 160k weekly downloads by madacol on Tuesday November 16, 2021 @04:48PM (#29246755)
The developer's most recent PR merged, with drama included https://github.com/jonschlinkert/cache-base/pull/23

I'm not sure what to think about this guy, but I think it's more guilty those packages that decide to depend on these dependencies rabbit holes and is also fault of the platform for not showing how deep the dependency-chain goes.

We should focus more on improving how we choose dependencies

Re:NPM – "is-even", 160k weekly downloads by runes on Wednesday November 17, 2021 @03:38AM (#29250423)
Some visualization on the package repo and in the CLIs would be excellent. Often when I run a dependency analyzer on a project I'm disgruntled.

I think what that Schlinkert guy is doing is obviously grifting, so I don't have to speculate on his intentions to call him a grifter.