Marking deprecated packages. Currently, if a package is entirely deprecated, the consumers do not see that they are using a deprecated package as long as they are using the last published version.
I ran into this issue with the package istanbul . Although the package is marked as deprecated in the npm's repo (https://www.npmjs.com/package/istanbul), the last published version shows as a healthy package in david-dm dashboards of the consumers and related badges.
Marking deprecated packages. Currently, if a package is entirely deprecated, the consumers do not see that they are using a deprecated package as long as they are using the last published version.
I ran into this issue with the package
istanbul. Although the package is marked as deprecated in the npm's repo (https://www.npmjs.com/package/istanbul), the last published version shows as a healthy package in david-dm dashboards of the consumers and related badges.