[styfle]

Both offer a free plan but Package Phobia is sponsored meaning its on the paid plan but getting it for free.

Kinda like a skateboarder might be sponsored and get a skateboard for free even though others pay for the same item.

Package Phobia started out on the free plan but it turns out its quite popular, serving over 5 million requests per month. A cache miss (which is frequent given the cardinality of packages + versions), it can take 30 seconds to install a package and measure its size.

There's also a public API which tools like Socket use to check the size of every npm package.

https://x.com/styfle/status/1826296197566644497