Adding to that, I also take a look at its dependencies: is it using half the NPM registry (or other central package registry) ?