logoalt Hacker News

viklove • today at 4:17 PM • 3 replies • view on HN

Where do you find these guys? I haven't worked on a project with more than 20 dependencies, and usually those dependencies have 0 subdependencies so they're quite easy to audit.


Replies

user43928 • today at 4:26 PM

Then you probably haven't worked much with JS.

The Jest test runner alone has 250 dependencies in its latest version, and v25 had over 500.

xnorswap • today at 4:19 PM

Are you including transient dependencies in that count?

➕ show 2 replies