The Hidden Financial Cost of Large NPM Packages

When developers install a new NPM package, the conversation usually sounds like this: "It's only one dependency." Five minutes later, the project has hundreds of additional transitive dependencies, a ...