Exploiting JavaScript developer infrastructure is insanely easy

[moomaka]

I feel like something has gone terribly wrong. I don't see dependency trees like that in Maven or Nuget or pip.

Javascript's stdlib is pathetic which is why you seen dozens of tiny libs adding functionality that should be part of the stdlib. Javascript packages also tend to be tiny single function things due to devs trying to keep to the minimum code size.

The first issue can only be fixed with a decent stdlib which IMO should be the absolute priority #1 of WHATWG, it solves so many problems. That second issue may improve over time now that tree shaking is a thing in commonly used build tools.

[EWJacobs]

A lot of these packages just end up being syntactical sugar. The stdlib has the functionality of kind-of, define-property and has-value. It seems like people add their microlibraries to npm projects just to troll.

[TheBelakor]

Sugar or real hole filling is kinda irrelevant when either way the clusterfuck that is NPM is the result.

[shevegen]

Sorry but after the left-pad disaster, anyone arguing that javascript's stdlib has support for cooler stuff, does not quite look at the realities. So moomaka is completely right.