3 ms·
Exactly, I've been thinking for a while that the lack of a package manager is really holding back qml adoption.
by david_ar 11y ago
Exactly, I've been thinking for a while that the lack of a package manager is really holding back qml adoption.
- cheez 11y agoI recently spent some time with npm. Holy fuck, that is a gorgeous piece of shit. It's gorgeous because it does exactly what it's supposed to do, exceptionally well. It's a piece of shit because every little thing you use has 3 billion dependencies which you have to validate and verify n some manner.
- Touche 11y ago> It's a piece of shit because every little thing you use has 3 billion dependencies which you have to validate and verify n some manner. If you mean to prevent breakage, shrinkwrap lets you lock down dependency versions: https://docs.npmjs.com/cli/shrinkwrap https://docs.npmjs.com/cli/shrinkwrap If you mean something else (security?) then I'd probably just not use npm, because as you said your dependency tree is going to be deep and reviewing all of that code is impossible.
- cheez 11y agoI think that's a consequence of its success. Every little library that anyone thought of building is up there.