David Sherret @dsherret.dev · Feb 7

Beware: npm doesn't show non-npm dependencies in the dependencies tab. Check out this package—npm lists it as having zero dependencies, but if you look at the package.json, it definitely has dependencies.

37 likes 5 replies

?

Replies

Wojciech Maj · Feb 8

At least npmgraph can't be fooled! npmgraph.js.org?q=%40dsherre...

naugtur · Feb 8

dev.to/naugtur/a-ph... Use LavaMoat to control your dependencies

David Sherret · Feb 7

I submitted this in a report to npm, but it was closed as being an intentional design decision. Previously I submitted a report about how the dependencies tab showed these dependencies as being npm packages (not remote ones) and I guess the fix was to just not show them at all.

Remco Haszing · Feb 8

It doesn’t show peerDependencies either. It does show devDependencies, which is not relevant for users.

Shinebayar (Ray) Gansukh · Feb 8

When will JSR start showing the number of the dependencies though?