TL;DR: There are three options to fix an NPM dependency:

• Open a bug ticket on the repository of the maintainer
• Fork & Fix
• Create a patch and fix it

J'avais tendance à privilégier la 2e solution, mais elle a l’inconvénient de créer une dépendance à github.com au moment du build, ce qui n'est pas toujours pratique dans un contexte d'entreprise... patch-package peut donc s'avérer bien pratique dans ce cas

par Mathieu O'Neil, Laure Muselli, Fred Pailler & Stefano Zacchiroli

La communauté du logiciel libre peut-elle se constituer en entité politique qui réfléchit, au-delà du logiciel, sur la société dans son ensemble ? Peut-elle se confronter aux orthodoxies productivistes, au développement infini de la puissance de calcul ? Tout le passé indique le contraire. Son succès, pourtant, en dépend.

TL;DR version of lessons from the post:

1. Writing open source software can be very rewarding in ways you can’t predict
2. Be in it for the long haul
3. Ship it and ship regularly
4. Have broad, open-ended goals
5. If you care enough, you’ll find the time
6. No one cares about your unit test coverage
7. There’s no shame in marketing
8. Clear it with your employer
9. Foster community
10. Keep it enjoyable

Source: https://www.reddit.com/r/Python/comments/smta85/lessons_learned_from_my_10_year_open_source/

$ npm install faker@6.6.6

LIBERTY LIBERTY LIBERTY

Article complémentaire FR: https://www.01net.com/actualites/au-bout-du-rouleau-un-developpeur-sabote-ses-logiciels-open-source-2053434.html

My highlights / quotes:

This creates an obvious congestion. Most people try to address it in the wrong way: using pragmatism. Let’s close the issue after two weeks of no original poster replies, after we ask some question. Close all the issues that are not very well specified. And other “inbox zero” solutions. The reality is that to process community feedbacks very well you have to take the time needed
So what happens? That you start to prioritize more and more what to look at and what not. And you feel you are a piece of shit at ignoring so many things and people, and also the contributor believes you don’t care about what others have to give you. It’s a complex situation.

Sometimes I just stop looking at issues and PRs for weeks, because I’m coding or designing: that is the work I really love and enjoy. However this in turn creates ways more pressure on me, psychologically. To do what I love and I can do well I’ve to feel like shit.

the sum of the productivity of me working just when I want is greater than the productivity I’ve when I’m forced to work every day in a steady way.