3 ms·
From the link: So in case you weren't aware: If you're using webpack, you're using is-odd. Which itself relies on the excellent package is-number. So, how and
by 2muchcoffeeman 8y ago
From the link:
So in case you weren't aware: If you're using webpack, you're using is-odd. Which itself relies on the excellent package is-number.
So, how and why did the developers let things get this bad?
- kbenson 8y agoI think there's a feedback loop in the JS ecosystem where the desire for smaller file sizes and the ability to pare down the fluff around a packaged function in webpack/whatever incentivize lots of small single purpose modules. If you care about the size of the code you are delivering then it makes sense to skip some larger math/numerics library and instead opt for is-odd, which itself includes is-number. Unfortunately, when the authors of modules also do this and not just end users, it becomes hard to track down how much a dependency actually adds, and the chain of dependencies can get very deep. Once that chain is deep we lose the ability to easily determine how a change the complex system we now rely on. And that's all really at a surface level. Once we start talking about trust and security, the problem gets much worse.
- 2muchcoffeeman 8y agoCouldn’t this just be done at transpilation time?