3 ms·

For-profit package managers like NPM touted download and package counts as if they were KPI. Deep dependency trees is the natural result.

• freeqaz 4y ago
  Installing react-scripts is ~1400 dependencies and around 2 million "edges" (where one package requires another). This blew my mind recently when "yarn audit" was failing with an OOM error!
  • wikfwikf 4y ago
    The complete graph on 1400 nodes only has a million edges.
    • taneq 4y ago
      Clearly these dependencies are bidirectional. :P
    • freeqaz 4y ago
      It depends on the version of React Scripts. Newer ones are better, but ~3.4.4 is around 2m edges with the JS library we're using to parse it out. Regardless, I was very surprised that it could be 7 figures!
• Jenk 4y ago
  That's ret-conning a correlation. Npm aren't _generating_ packages themselves. The community at large is generating them.