4 ms·
I've been skimming the arguments so I might have missed something big, but isn't the key distinction that Deno can take anything from a URL? Go's "go get" is ba
by maxmcd 6y ago
I've been skimming the arguments so I might have missed something big, but isn't the key distinction that Deno can take anything from a URL? Go's "go get" is backed by version control systems, but you could freely point your deno at "http://dangerous.com/evil.ts" http://dangerous.com/evil.ts". I thought the concern was about the potentially problematic flexibility.
- earthboundkid 6y agoGo has a system for telling where to fetch based on the URL response. You can basically send anything if you are evil, but Go modules keep a hash of seen content (what Deno calls a lockfile), so you’d notice that it changed.
- 14u2c 6y agoIsn't that the advantage though, that you can do exactly that without concern. > deno run --allow-write=~/only-evil-here http://dangerous.com/evil.ts http://dangerous.com/evil.ts