npm weekly #126: Take the 2017 JavaScript Ecosystem survey, Bundlephobia, memes for the meme gods, socks for the sock throne

Did we mention we trade bug fixes for socks? ’Cos we totally do! [View this email in your browser]( [Winter is finally here!]( Ten minutes can change the world: take the 2017JavaScript Ecosystem Survey As the JavaScript world continues to grow, it’s more important than ever to improve its tools and platforms and understand its users. In partnership with the [JS Foundation]( and the [Node.js Foundation]( we’ve put out the [2017 JavaScript Ecosystem Survey](. Please take ten minutes to share your thoughts. Check out Bundlephobia [Bundlephobia, find the cost of adding a npm package to your bundle. ]( Released this week, [Bundlephobia]( by [Shubham Kanodia]( gives you an idea of the performance cost of installing a new npm package before you actually add it to your bundle. It’s available on the [Now platform from ZEIT](. ’Tis the season for cozy socks [Safia Abdalla models npm socks]( Photo by [Safia Abdalla]( If you find yourself with down time over the holidays or coming weeks, check out how to snag some sweet swag: we trade [fixed npm bugs for npm socks]( so skim the issues, suggest a fix, and you’ll be wearing a cozy pair in no time! This is just to say, we ❤️ memes This Is Just To Say I have deprecated the packages that were on your profile and which you were probably wishing to unpublish Forgive me they were precious so unsupported and so old. Poem by npm support human [Elizabeth Posadas]( who was inspired after deprecating 10 packages for a single support ticket. [RFC] New npm link commands Earlier this week, [Rebecca Turner]( posted [an RFC with a proposal for a replacement for the `npm link` command.]( If you have time to review, we’d love to hear your thoughts on the proposed solution, so check out the RFC and leave your comments. sponsored [“lgtm” is not a security strategy]( [Reach out to ^lift security about a security audit today!]( Just dropping a 👍 on a PR isn’t enough, so npm relies on external audits and pull request reviews from ^lift security. [Reach out to their team]( for a free consultation. Because npm loves you... Happy Holidays! [David Pine shared some command line holiday magic!]( Just look at this command line Christmas tree, all cute and code-y. [David Pine shared this screenshot]( on Twitter earlier this week, and we’d like to extend this happy holiday greeting beyond Christmas and Noders to everyone and anyone celebrating this season. Happy Holidays and enjoy the Winter Solstice! Get free socks! [Just fix some bugs](. Copyright © 2017 npm, Inc., All rights reserved. You (or someone impersonating you) signed up for this email list on our site... but you can feel free to remove yourself at any time. Our mailing address is: npm, Inc. 1999 Harrison St. Ste 1150Oakland, CA 94612 [Add us to your address book](//npmjs.us9.list-manage.com/vcard?u=077dfd41302a71310cef619e5&id=e17fe5d778) [unsubscribe from this list]( [update subscription preferences]( [Share]( [Tweet]( [Forward]( [Share](