Hacker News new | ask | show | jobs
by silverwind 224 days ago
It's a misconception that NPM or Node encourage this, because they don't. There are a few package authors that are doing it that way (some even paid by download count), but that's their opinion.

Recently there is a trend towards minimal-dependency packages and I would certainly recommend auditing every package for its dependencies before using it.