Hacker News Reader

"ws" is regularly the only package in my package.json

Same. Without that I could remove all npm dependence, which would greatly improve security.

If you're not tied to the ecosystem, why not switch to Deno?

Actually, maybe you are correct and I should.