Test your knowledge of the NPM ecosystem by guessing the number of dependencies for popular NPM packages.
FAQ
How is the dependency count calculated?
As the dependency tree is traversed, each dependency from the dependencies field in the package.json is resolved according to their range and added to the overall count. It's a straight accumulation, as such the same package is counted multiple times if it is a dependency of other packages.
How is the distinct dependency count calculated?
A dependency is distinct if after resolving it according to their range differs in name and version. Multiple same version dependencies will only be counted once.
Is there an overview page?
All available packages can be found on the overview page
Why is it called npmbomb?
It's a hommage to the word zip bomb. Wikipedia defines it as:
"A zip bomb is usually a small file .... however, when the file is unpacked, its contents are more than the system can handle."
Sounds familiar? 😈
Does it count dev dependencies?
No, it only shows (and counts) dependencies from the dependencies field in the package.json all the way to the very last dependency.
Why can't I find library XYZ?
For now, it only shows a preselected number of libraries, namely the ones that are in the dependency tree of the most downloaded packages. If you want a specific dependency or have an idea or just want to chat in general, you can contact me on Twitter @tmkndev