3 ms·
The universe is chaotic and insecure
by teliskr 8y ago
The universe is chaotic and insecure
- emodendroket 8y agoMaybe so, but that doesn't really address the concern.
- hungerstrike 8y agoThe article already addressed its own concerns: - Manually audit and lock down your dependencies. - Stop using nonsense dependencies, writing basic code is not reinventing the wheel.
- emodendroket 8y agoExcept that if your dependencies in turn use nonsense dependencies you're back to the problems.
- hungerstrike 8y agoShould we not count dependencies that are comprised of nonsense dependencies as nonsense themselves? In my opinion, fork it and fix it or stop using it. Also, warn others if you have the capacity.
- emodendroket 8y agoleft-pad broke non-trivial projects like Babel, as I recall.
- hungerstrike 8y agoYep, but there’s a big difference with how I treat dev and production dependencies. I wouldn’t use something nearly that large in production. Typically I look at a dependency to see if I could maintain it myself if necessary because it’s always risky to depend on a third-party.
- jwalton 8y ago... because it has node.js in it. ;)