15 ms·
I'm always glad when there's an npm package for something, no matter how small, and I don't have to sift through stackoverflow answers, particularly when someth
by amadeuspagel 6y ago
I'm always glad when there's an npm package for something, no matter how small, and I don't have to sift through stackoverflow answers, particularly when something is hard to test, like browser support. 40 million people using a package is far better evidence then a few hundred people upvoting an answer.
- jamesgeck0 6y agoUntil the micropackage has a security vulnerability, and the secure version is a breaking change, and the vulnerable version is locked in deep in your dependency tree.
- amadeuspagel 6y agoRight, code that you copy from stackoverflow never has security vulnerabilities.