I understand, and there are some issues there. However, I think sites like github kind of vet themselves. You are baring your soul to the developer world when you upload your source for anyone to peruse through in their browser. The better projects get starred, forked and get more contributors. The more average projects fade into obscurity.
As far as node goes, yes things are popping-up all the time and it can seem intimidating to be jumping in. I felt the same way when I started. Even with node's amazing adoption rates, it isn't the mature platform with a decade+ usage like some others. While node itself is quite stable these days, it represented quite a radical shift in the way things were done, so people's minds are still bursting with new ideas on how to do old tasks and even new things never tackled before.
Having said that, the "core" packages that remain the most popular on node are very stable, highly supported, and aren't going anywhere anytime soon. Even if the core teams were to disappear tomorrow, the source is out there and so many people depend on these packages that a new, able team would immediately step in to carry the torch. Check out the
main npm page. Look at the "Most Starred" projects (the numbers are low because people don't typically use npm through the web interface, which is the only UI that allows starring; they use it through the npm application, so probably multiply all those numbers by 1000). Those are the core packages used day-in and day-out by many Fortune 500 companies: Express, async, request, Grunt, Socket.io, Mocha, Lodash, Underscore, Mongoose, Jade, etc. There are probably more you could lump in there as well, such as EJS. Even with all the new, full-stack web frameworks that have come out, Express is still on top and likely always will be, since the bigger frameworks all have Express as a dependency. Same with Socket.io. About a year or more back, Now.js was making waves, but all that did was make Socket.io even more important since it is a dependency of Now.js (Now.js has since fizzled out and their backing company went bankrupt due to an unrelated deal, but that is another conversation lol).
I say just use what you find useful. These packages aren't binaries, and you have the source code to make whatever changes you may need, so as long as it suits your needs today, I would say you are fine. And like I mentioned, those core packages aren't going anywhere anytime soon.
