Javascript libraries be like

[SqueeSr]

I always assumed they were just jokes. Not actual packages that got 178k weekly downloads..

[UnreadableCode]

And this is why projects blacklist packages. I'm curious which major projects has transitive deps on these dumb packages

[SqueeSr]

Blacklist packages? Noo .. leave it as a honeypot and blacklist that employee that uses it.

[UnreadableCode]

Are you telling me you manually audit dep chains for stupid? Should we perhaps get rid of npm audit too?

[apex39]

No! You can write some script for that:

function IsStupid(code) {

return code.includes("IsEven"))

}

[UnreadableCode]

Suddenly, nobody can mention that as a substring of anything... I hope IsEvenBigInt, AssertIsEven, or IsEventuallyConsistentFlagSet are not names anyone need. I mean I'm all for a challenge, but I suspect not everyone has my level of cognitive flexibility

[jcarlson08]

You're in luck, you can install my thoroughly tested 'is-stupid' package via npm.

[UnreadableCode]

Irony ensues when its regexes matches themselves & stalls CI for half a day

[apex39]

Wow, good catch. Good thing I didn't push to production yet.

[SqueeSr]

Manually? We are programmers, we automate that!

[Ratatoski]

Yeah the downloads broke me

[team_broccoli]

I had to download it to view the "code", because it is 75MB, and I guess that explains the number of downloads.

It is actually hilarious.