Re:NPM – "is-even", 160k weekly downloads
by runes on Wednesday November 17, 2021 @03:38AM
(#29250423)
Some visualization on the package repo and in the CLIs would be excellent. Often when I run a dependency analyzer on a project I'm disgruntled.
I think what that Schlinkert guy is doing is obviously grifting, so I don't have to speculate on his intentions to call him a grifter.
I'm not sure what to think about this guy, but I think it's more guilty those packages that decide to depend on these dependencies rabbit holes and is also fault of the platform for not showing how deep the dependency-chain goes.
We should focus more on improving how we choose dependencies