5 ms·
The "division of thought" you talk about is the opposite of "opinionated" designs/standards. The former assumes that the reader is going to take their time, th
by philsnow 7y ago
The "division of thought" you talk about is the opposite of "opinionated" designs/standards.
The former assumes that the reader is going to take their time, think about their own implementation and their own specific use case, and make several careful decisions about how to make it work.
The latter assumes that ain't no reader got time fo dat, and is going to try to npm install any packages that have the same name as keywords in the title of your standard and assume that they're fine.
Development these days is unfortunately slanted towards the latter at a lot of companies who only measure output on number of features you've shipped or the impact of products you've launched, so every incentive there is to ship things as soon as you can.
However, there's no field in package repository metadata that says "this package has sharp edges, use with care" or "this package comes with safe defaults, but use with care nonetheless".
- kreetx 7y agoNot so sure - you can design things unopinionated but still have them secure. As an analogy, the whole point of statical typing is to allow all sensible programs to be written while keeping out everything that contradict itself. I.e if the PASETO were a type and an implementation a program then you wouldn't be able to write an implementation that would adher the type but would be insecure. Doesn't appear to be so with JWT and co.