I figured that must be the case when my newly published NPM package got 100 downloads of the initial beta version. Still kinda cool to think that you put someth

I figured that must be the case when my newly published NPM package got 100 downloads of the initial beta version. Still kinda cool to think that you put something out and it's immediately getting reproduced. (Or freaky, depending on your perspective). Similarly, there are a bunch of requests in my site's analytics for files that don't exist - some of them are normal, like the sitemap, but others seem to be WordPress and other framework specific files (my site is not a WP site). My guess (without any background knowledge or research) is that bots are trying to fetch these files to scan for known vulnerabilities. Again, kinda neat or scary depending on your standpoint.