Author of npm package deprecated 2 years ago still sees 15M weekly downloads, blames LLMs

fhinkel · x · 2026-10-23

fhinkel, a V8 engineer at Google, notes that despite her efforts, the npm package she deprecated two years ago still gets 15 million weekly downloads. She jokes that she wishes LLMs were as good at fixing outdated package management as they are at finding vulnerabilities — implying AI-generated code keeps pulling deprecated packages.

Original post →

More from coding & agent

coding & agent channel →