Nearly 100,000 NPM Users' Credentials Stolen in GitHub OAuth Breach

• React

  1,691 221,535 9.8 JavaScript

  The library for web and native user interfaces.

  

React has exactly one dependency, something called loose-envify. Don't think this is a good candidate for a "standard library" there aren't environment variables in core JavaScript. react-dom depends on a package called [https://www.npmjs.com/package/scheduler](scheduler) which is for "cooperative scheduling in a browser environment". Don't think this is a good candidate because it's only for browser environments, not server side too.

• sdk

  113 2,532 10.0 C#

  Core functionality needed to create .NET Core projects, that is shared between Visual Studio and CLI (by dotnet)

  

The tooling is often related to paid services/features. Like Microsoft trying to lock essential ide features behind a proprietary paywall..

• SurveyJS

  surveyjs.io sponsored

  Open-Source JSON Form Builder to Create Dynamic Forms Right in Your App. With SurveyJS form UI libraries, you can build and style forms in a fully-integrated drag & drop form builder, render them in your JS app, and store form submission data in any backend, inc. PHP, ASP.NET Core, and Node.js.

  

• Mono

  90 10,837 6.0 C#

  Mono open source ECMA CLI, C# and .NET implementation.

  

It's called Mono, it's an open source implementation of .NET

• prettier

  439 48,241 9.8 JavaScript

  Prettier is an opinionated code formatter.

  

Hey, I looked at your package.json and noticed that it pulls prettier as a dev dependency. So even though you didn't pull too many packages directly, prettier itself will pull a few dozen packages. I know that these are dev dependencies but even a malicious dev dependency can be a huge security issue, it can still steal your dev credentials.

• proposal-iterator-helpers

  35 1,224 5.0 HTML

  Methods for working with iterators in ECMAScript

  

Iterators proposal is at Stage 2 currently. I agree this would be a great help, please contribute and push it along if possible!

• top-npm-packages

  1 1 1.8

  list of all npm packages ranked by monthly downloads

Agreed, this could be a useful approach. I found this list of the top downloads of npm packages (npm doesn't publish this info? Or I just missed it?)

• XmlSchemaClassGenerator

  1 537 8.8 HTML

  Generate C# classes from XML Schema files

On .NET, there is XMLSchemaClassGenerator; albeit third-party, it is actively developed and widely used. On NPM, a gigantic package like React or Angular might pull in one recursive subdependency that is tiny, obscure and ridiculous, like left-pad.

• InfluxDB

  www.influxdata.com sponsored

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

• stdx

  10 1,931 10.0 Rust

  The missing batteries of Rust

You suggested creating a super-library of vetted crates. It has been tried before, but it didn’t get any adoption. stdx - The missing batteries of Rust was never used much. Looking at it now, it recommends crates that have been superseded by others.

• JSON-java

  7 4,472 9.0 Java

  A reference implementation of a JSON package in Java.

Java: org.json

• is-even

  56 1,828 0.0 JavaScript

  Is a number even?

I found a great implementation for that a while ago: https://github.com/samuelmarina/is-even (index.js)

• rust

  2,681 92,831 10.0 Rust

  Empowering everyone to build reliable and efficient software.

  

And once_cell, successor to lazy_static, is even in the process of coming to std. And even with agreement that the semantics are now definitely right and it's a worthwhile addition the process is simply thorough to ensure that it won't become a wart and is generally flawless in every regard, also, the process is non-hurried because you can always just import the separate library.

Suggest a related project