Post

Matthew Phillips
@fancypenguin.party

What prevents abuse? Maintainers of npmx are changing the data of their other projects, don't you see how this smells bad? Even if all is correct, relying on self-reporting means the incorrect data on other projects makes those look bad by comparison.

Dave Di Biase
@davedbase.com

I’m fine with this as long as they publish who reported the anomaly and why. If it’s public it’s maybe more likey to be scrutinized. Also the ability to toggle between the sanitized and raw charts is reasonable. The question is, how maintainable is this?

patak
@patak.cat

The original data is corrupted, as usual with raw data. Please open an issue to discuss if you have a better proposal. I haven't worked myself in the current implementation, better if you reach out to the folks that are working this out.

Safwan Parkar
@safwanyp.com

as i see it, the number of downloads i see are simply "how many times was this package pulled and installed". with the example of vite, where there was a spike probably because of a rogue CI, isn't it still counted as a download? just trying to understand what the aim of this is. super curious!