quarantine 'em

to be fair this is a problem specifically with this one guy and if all his packages were removed the problem would shrink by more than halfhttps://twitter.com/xkeepah/status/1260515053834391552 …

this is the guy whose package `is-even`, which tells you whether a number is even, has the following source code, in its entirety: var isOdd = require('is-odd'); module.exports = function isEven(i) { return !isOdd(i); };

this guy has a package `filter-object`, where you give it an object and a filter and it returns a new object with only some of the keys of the original. about four lines of code, right? no dependencies, surely? watch: https://npm.anvaka.com/#/view/2d/filter-object …

I once discovered someone had used `filter-object` in our front-end code, I replaced it with a simple loop and saved us 900kB of dependencies

yeah this is how the fellow ends up claiming with a straight face that his code is used by NASAhttps://twitter.com/cronokirby/status/1260569190416728064 …