I built a JS framework with zero dependencies...

In March 2026, the axios maintainer's npm account got hijacked. 300 million weekly downloads. One compromised account. That's when I asked myself: How much of my attack surface is just... npm? So I built something without it. What is nulldeps? A micro-framework for building web apps. ✅ No npm ✅ No build step ✅ No node_modules ✅ No config files What you get: 🧩 Web Components 🔀 Client-side Router 🗃️ Reactive Store 📡 EventBus 🌐 Http Client Zero dependencies. Nothing to hijack. The honest tradeoff Y