4 ms·

And pulling ~67 dev dependencies just to be able to transpile TS to JS? No thanks. https://www.npmjs.com/package/typescript https://www.npmjs.com/package/types

• Loeffelmann 5y ago
  Do these dependencies actually matter when you deploy or are they just used for the actual compiling?
  • El_RIDO 5y ago
    If they are required for the compile and someone manages to get something malicious into them, they can certainly affect the produced/deployed artifact. See Ken Thompson, Reflections on Trusting Trust, 1984 https://www.cs.cmu.edu/~rdriley/487/papers/Thompson_1984_ReflectionsonTrustingTrust.pdf https://www.cs.cmu.edu/~rdriley/487/papers/Thompson_1984_Ref...
• 0x142857 5y ago
  This comment shows perfectly that people has no clue what they're talking about, these dev dependencies will never be pulled into your project, they're just for typescript's own development.
  • Ginden 5y ago
    > these dev dependencies will never be pulled into your project, Please, don't ruin "JS bad" thread with facts. It's rude.