I have a package on NPM which is only partially implemented, using it in a production app is a bad idea, a quick glance at the source code or the todo section of the readme makes it pretty obvious. I still gets bug reports and npm says it has hundreds of download every month.
For anything serious, read the source code, at the very least check your dependencies.
For anything serious, read the source code, at the very least check your dependencies.