Skip to content
TopicTracker
From HackerNewsView original
TranslationTranslation

Someone at NPM needs see this – to stop the madness

The video critiques npm (Node Package Manager), highlighting issues with its package management system, such as dependency bloat, security risks, and inefficiencies. It calls for improvements to address these ongoing problems in the JavaScript ecosystem.

Background

- The video calls out a problem with the npm (Node Package Manager) ecosystem, likely related to package bloat, dependency sprawl, or security issues — common points of frustration in JavaScript development. - npm is the default package manager for Node.js, used by millions of developers to install and manage reusable code libraries. Its registry hosts over 2 million packages and processes billions of downloads per week. - The "madness" often refers to the left-pad incident (2016), where a developer unpublishing a trivial package broke thousands of projects that depended on it, or to the broader "node_modules" bloat and supply-chain security crisis (e.g., malicious packages, excessive dependencies). - The video title implies a direct appeal to the npm team or its parent company (acquired by GitHub/Microsoft in 2020) to address a specific, damaging practice within the ecosystem.

Related stories