Here's a highly downloaded 11 line module with lots of dependents. https://www.npmjs.com/package/escape-string-regexp https://www.npmjs.com/package/escape-stri

Here's a highly downloaded 11 line module with lots of dependents. https://www.npmjs.com/package/escape-string-regexp https://www.npmjs.com/package/escape-string-regexp I stopped searching at 1. I've certainly benefitted from the vast ecosystem of npm. I greatly appreciate the work that goes into making this ecosystem what it is. However, I think we need to be a bit more critical when it comes to acquiring dependencies. Especially authors of very prominent packages. Fun fact: one of my projects (a web api) depends on over 700 unique name/version modules. Fellow programmers. This is embarrassing.