Choosing the correct dependencies for your project

It is true that the npm ecosystem is very solid and growing every day. But it is also true that many packages are not maintained anymore, or that include security vulnerabilities and performance issues.

The community is aware of this and there are plenty of jokes and memes about this topic. For example, the following image:

Figure 6.1 – npm Delivery by MonkeyUser – a classic meme that shows how many dependencies we tend to include in our projects (https://www.monkeyuser.com/2017/npm-delivery/)

While this is a joke based on the huge number of dependencies and sub-dependencies that we install on an average project, it is true that we need to be careful when choosing the dependencies for our projects. In this section, we will see how to choose the correct dependencies for our projects.

Note

Most modules depend on other modules, and those modules depend on other modules, and so on. This...