search

rschristian / voldephobia

A silly little tool to find out if your dependency tree is plagued with packages from You-Know-Who
https://voldephobia.rschristian.dev
MIT License
85 stars 2 forks source link

Show top consumers of he who must not be named #4

Closed benmccann closed 2 weeks ago

benmccann commented 2 weeks ago

I would like to be of service to the community and remove usage of packages from he who must not be named. While I've excised him (or her - but not really) from my own code bases, there are many who are still plagued by the affliction. Unfortunately, it's hard to find and help these poor souls. I would love if I could see https://www.npmjs.com/browse/depended/deep-equal sorted by monthly downloads

Screenshot from 2024-06-21 07-53-10

rschristian commented 2 weeks ago

It's something I've briefly talked about with James for supporting 43081j/ecosystem-cleanup as it's indeed a bit of a struggle.

Admittedly my list of things to do is a mile long at the moment, and full of things that are actually quite pressing, so I'm not sure I'll be able to find any time to add something like this in the near future, though I think I would like to see it added.

benmccann commented 2 weeks ago

I found a list! https://packages.ecosyste.ms/registries/npmjs.org/packages/deep-equal/dependent_packages?order=desc&sort=downloads

valadaptive commented 2 weeks ago

I took a quick look and it appears that the ecosyste.ms API has a lot of false positives--most of the reverse dependencies listed in the above page don't seem to actually have deep-equal as a dependency.

rschristian commented 2 weeks ago

They might've done at one point though? It might be picking up on older versions

benmccann commented 2 weeks ago

yeah, I filed a couple of issues there though and the maintainer is really responsive so I think it should be addressed before too long hopefully

valadaptive commented 2 weeks ago

I created a CLI util to round up package consumers and nested or reverse dependencies--it's a bit of a mess right now and eats up way more CPU than it should, but hopefully someone finds it useful.

benmccann commented 2 weeks ago

Here's the updated web UI: https://packages.ecosyste.ms/registries/npmjs.org/packages/deep-equal/dependent_packages?kind=runtime&latest=true&order=desc&sort=downloads