3 ms·
Yes. I checked out a small project recently and it had over 2000 nom packages as dependencies. The culture around node development was/is just too dependency h
by gorjusborg 5y ago
Yes.
I checked out a small project recently and it had over 2000 nom packages as dependencies. The culture around node development was/is just too dependency happy.
I get standing on the shoulders of giants and that not all people are bad, but with thousands of dependencies, the chances of a supply chain issue starts to become significant.
- tomjen3 5y agoMost people are good, but because destruction is so much easier than creation a few people can destroy what it takes a lot of people to build. For example it will take Ukraine months just to dig the bodies out the destroyed family homes that Russia spend a few minutes bombing. However I don't think the number of dependencies is a useful number: node was one of the first languages to have a build in standard way to get and manage dependencies, which meant that dependencies could be much, much smaller. Boost for C++ is a giant project, so you can say that your C++ project only has a few dependencies, but if C++ had a decent standard dependency manager, projects like Boost were probably split up more. * I am aware Maven exists for Java, but the cultural expectations for Java were set long before it became a thing.