3 ms·
>Should I be doing security audits on every single one of the 760 modules? Yes, ideally. I know this isn't practical. The fact that you have so many dependenc
by ryukafalz 7y ago
>Should I be doing security audits on every single one of the 760 modules?
Yes, ideally.
I know this isn't practical. The fact that you have so many dependencies and any one of them could do something bad should be a sign that something is deeply wrong in the ecosystem.
- dlivingston 7y agoThe JavaScript ecosystem is famous for bloat like this. Python is much better, though there is still an O(n^m) dependency tree. Languages like C/++ and FORTRAN commonly have effectively O(n) dependency trees. I suspect it’s related to the ease of use to add new libraries/modules.