2 ms·
...By adding thousands of libs, turning node_modules into a multi GB folder. Oh, and each of which can be compromised by an unscrupulous actor. Good luck audit
by Ygg2 5y ago
...By adding thousands of libs, turning node_modules into a multi GB folder. Oh, and each of which can be compromised by an unscrupulous actor.
Good luck auditing that.
- p2t2p 5y agoLike if any other thing with automatic package management is any better. .m2/repository is 5 gb on my machine. Rust crates? Go packages that are neatly tucked away too? Node just makes it visible and in your face by putting the node_modules in you project directory. Besides, what’s the alternative? Write stuff yourself? Put stuff in language stdlib? Even minimal service requires _a lot_ of things to do minimal stuff.