Phantom dependencies in JavaScript package managers | Hacker News Reader