When "Everything" Becomes Too Much: The npm Package Chaos of 2024 - Socket
socket.dev
An NPM user named PatrickJS launched a troll campaign with a package called "everything," which depends on all public npm packages.
  • dependencyinjection@discuss.tchncs.de
    31·
    9 maanden geleden

    Thats a good question and I’m not sure to be honest.

    We use NPM at work client side for React Typescript and Nuget server side for C# .net and all I know is the senior always complains about NPM but not NuGet I do believe the backend is less package reliant on our applications so maybe that’s why it’s not as bad.