I'm fairly certain those download numbers include CI runs redownloading the not-... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

dvlsg on April 11, 2022 | parent | context | favorite | on: Node.js packages don't deserve trust

I'm fairly certain those download numbers include CI runs redownloading the not-cached package over and over, likely via a transitive dependency. I don't think it's fair to say approximately half a million unique JS developers are choosing to import it every week.

imtringued on April 11, 2022 [–]

That's the damn problem with npm.

This library is responsible for 50% of all downloads to is-even which calls is-odd. https://www.npmjs.com/package/handlebars-helpers

Who cares? https://github.com/helpers/handlebars-helpers/issues/315

Consider applying for YC's Fall 2026 batch! Applications are open till July 27.
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact