[emodendroket]

Except that if your dependencies in turn use nonsense dependencies you're back to the problems.

[hungerstrike]

Should we not count dependencies that are comprised of nonsense dependencies as nonsense themselves?

In my opinion, fork it and fix it or stop using it. Also, warn others if you have the capacity.

[emodendroket]

left-pad broke non-trivial projects like Babel, as I recall.

[hungerstrike]

Yep, but there’s a big difference with how I treat dev and production dependencies. I wouldn’t use something nearly that large in production. Typically I look at a dependency to see if I could maintain it myself if necessary because it’s always risky to depend on a third-party.