Comment by Brian LeRoux on "Checking npm package quality"

Apache 2.0 or compatible BSD style license
has tests
has CI
if a build step was required it happened before artifacts were published to npm so the module is compatible with vanilla JS
has minimal deps itself and uses devDependencies
works in current Node on AWS Lambda (usually the most recent TLS release)
doesn't require latest bleeding edge (likely slow and buggy) language features
ideally works in browser and node and is tested as such
bonus points: eslint
bonus points: failing tests for outdated deps and performance budget

Search Hashnode