quarantine 'em

to be fair this is a problem specifically with this one guy and if all his packages were removed the problem would shrink by more than halfhttps://twitter.com/xkeepah/status/1260515053834391552 …

this is the guy whose package `is-even`, which tells you whether a number is even, has the following source code, in its entirety: var isOdd = require('is-odd'); module.exports = function isEven(i) { return !isOdd(i); };

this guy has a package `filter-object`, where you give it an object and a filter and it returns a new object with only some of the keys of the original. about four lines of code, right? no dependencies, surely? watch: https://npm.anvaka.com/#/view/2d/filter-object …

I once discovered someone had used `filter-object` in our front-end code, I replaced it with a simple loop and saved us 900kB of dependencies

yeah this is how the fellow ends up claiming with a straight face that his code is used by NASAhttps://twitter.com/cronokirby/status/1260569190416728064 …

it would be marginally less annoying if the code itself wasn't so FLAKY `isOdd(1e100)` should return `false` but throws an exception `isOdd(2.5)` throws because it's expecting an integer, but `isOdd('')` returns `false` `isEven` doesn't even use the latest `isOdd`?

I'm sure he's a lovely fellow but his code is among the absolute worst I've ever seen