Dependency count isn’t a good measure because different ecosystems have different default sizes to split something out. Number of unique maintainers, on the ot

Dependency count isn’t a good measure because different ecosystems have different default sizes to split something out. Number of unique maintainers, on the other hand, is more consistent across languages and represents a real risk re supply chain safety, since compromising any maintainer is a route to a hack.