|
|
|
|
|
by silverwind
224 days ago
|
|
It's a misconception that NPM or Node encourage this, because they don't. There are a few package authors that are doing it that way (some even paid by download count), but that's their opinion. Recently there is a trend towards minimal-dependency packages and I would certainly recommend auditing every package for its dependencies before using it. |
|