Comment by viklove
3 hours ago
Where do you find these guys? I haven't worked on a project with more than 20 dependencies, and usually those dependencies have 0 subdependencies so they're quite easy to audit.
3 hours ago
Where do you find these guys? I haven't worked on a project with more than 20 dependencies, and usually those dependencies have 0 subdependencies so they're quite easy to audit.
Then you probably haven't worked much with JS.
The Jest test runner alone has 250 dependencies in its latest version, and v25 had over 500.
Are you including transient dependencies in that count?
*transitive
Yes 20 total dependencies including transients. If a lib has many subdependencies I take this as a red flag and try to avoid it.
No react then?
https://news.ycombinator.com/item?id=39019001