In the past we used http://microjs.com/ and similar to find small libs to work with when we threw together marketing websites, not sure how maintained that list is nowadays but the idea is that you can make websites like lego, sometimes you don't need a whole box of Eiffel tower to make a little tree.

If your functionality is well thought out and not super complicated, don't have 10s or 100s of devs on the same project then working without a well known framework could make sense, otherwise there can be steeper learning curve when onboarding new devs, scope creep / bloat, etc that will likely cause issues down the road.

To learn about this you could try to replicate for example the mentioned Obsidian by yourself and research solutions for all the issues you run into, e.g. minimal routing, custom view renders, reactivity, performance, etc.

We could likely see a bit more of these data leaks in the future I guess, due to how there are more and more countries/states adopting this.

The "blind" auto updating to latest versions seems to be also an issue here, simply you cannot trust it enough as there is (seemingly) no security vetting process (I mean if you get obfuscated gibberish pushed into a relatively sanely written codebase it should ring some alarms somewhere).

Normally you'd run tests after releasing new versions of your website but you cannot catch these infected parts if they don't directly influence the behavior of your functionality.

By the way why doesn't npm have already a system in place to flag sketchy releases where most of the code looks normal and there is a newly added obfuscated code with hexadecimal variable names and array lookups for execution...

I think focusing on numerical stats here is also a bit of a problem and while making these guardrails might help some people but the main issue should be addressed (overconsumption/addiction).

I wonder by reducing the screen time of the phone, how the screen time of the other devices (computer/tv/etc) changed.

Especially after the fakerjs (and other) things.

Since B6 is water soluble doesn't it mean most of it might just leave our body if not needed? (No storage in fat)

The problem is that each of these apps can be quite bloated and in the tens of MBs range not the usual single digit MB.

I'd say in Germany for starting a new GmbH you'd need at least 4-5k set on the side for lawyer/notary/accountant fees, this can be deducted from the 12.5k/25k bank account but it's a pain in the ... for the average startup.

Also for bigger companies this is not really a "big" problem as they usually have in-house proxies (as you cannot rely on a 3rd party repository in CI/CD for multiple reasons (security, audit, speed, etc)).

with prod env: 700MB

without prod env: 900MB

sadly the bloat cannot be avoided that well :/

I would not be surprised if there are still some auto generated link directories left from the "golden ages" of blackhat.