5 ms·
FWIW, I've taken the exact opposite route. Much as I respect sindresorhus, my projects nowadays have very few dependencies; I treat every dependency as an eleva
by stareatgoats 7y ago
FWIW, I've taken the exact opposite route. Much as I respect sindresorhus, my projects nowadays have very few dependencies; I treat every dependency as an elevated "point of failure"-risk, and I would not recommend anyone having potentially thousands of "left-pads" sprinkled across a business-critical system.
- eropple 7y agoYou shouldn't be relying upon NPM or any other public package registry for a "business-critical system" in the first place. When the left-pad guy had his snit, we didn't notice at all because we had a caching NPM mirror.