Miss Dada  🏳️‍⚧️

The most popular markdown parser on npm hasn't seen a release in 7 years, and the second most popular markdown parser emits an unclosed <em> whenever you use *emphasis* syntax on any line other than the last line of a paragraph.

I'm on day two of a completely normal "update all of our dependencies" cycle and it feels like it will never end. Really making me wish I weren't married to the Node+npm ecosystem. No other ecosystem that I've worked in has been like this.

Apparently those popularity rankings that I quoted were wrong, because sorting by "popularity" in NPM doesn't seem to sort by popularity.

Does anyone except me care about any of this? It feels like everyone else is content to have everything break at random on a daily basis, then often stay broken for months or sometimes forever. (This is an actual question; I don't mean it dismissively.)

some interesting and worrying signal that I've got as a result of publishing some npm security releases recently is that there's a significant number of users for whom it's not clear how to upgrade dependencies, which pushes them towards extremely brittle release management