14 ms·
Mostly in agreement, but the sin IMO is absolutely not in depending on left-pad. Code reuse is good, and it could have been any package, including something lik
by mattnewton 9y ago
Mostly in agreement, but the sin IMO is absolutely not in depending on left-pad. Code reuse is good, and it could have been any package, including something like your Postgres adaptor. The sin is not running an npm mirror under company control, that can do things like audit open source licenses and protect against npm outages.
- taneq 9y agoAgreed - my issue is not with using whatever libraries make your life easier, it's with having those libraries under the control of a third party. So if you run your own npm mirror and vet updates (and can roll back versions if an update does break something) then you're good. Anyone who complained that they got to work one morning and their production code was broken because of a change to something external to their building should be sacked.