elcerebro

3 ms·

1. 1.▲
   by elcerebro 3y ago

   I admittedly pulled the numbers out of thin air, and things I thought I’d seen before. Had a second to sit down, and I _way_ overestimated my counts. Per NPM there are 2,480,373 packages. According to Whitesource [1] there are an average of
2. 2.▲
   by elcerebro 3y ago

   There’s no way that’s true. Last I checked there were 16M packages in npm, not counting versions. If we bump that up to 20M and add a multiple of 30 to account for versions, we get 60M total tar.gz files we’d need to scan. At a total cost o
3. 3.▲
   by elcerebro 3y ago

   I don’t think anyone has issues with pertinent content marketing that also provides something to the community. The argument can be made that the _important_ work was already done by GitHub and Phylum. This just appears to be a derivative w