5 ms·

nodejs is full of "full-stack developers" that used to be "front-end engineers" or "integrators" 10-ish years ago. In a lot of cases, they do not come from a CS

by pluc 5y ago

nodejs is full of "full-stack developers" that used to be "front-end engineers" or "integrators" 10-ish years ago. In a lot of cases, they do not come from a CS background but a more creative one due to the related tasks their profession used to have to deal with before js and node exploded (eg slicing templates), thus are less aware of/strict on security risks and issues. That's biased as hell but it's been my experience

fshbbdssbbgdd 5y ago
This is what’s known as a “just-so story”. In an alternate universe you could tell the same story to explain why js devs only copy/paste code and never use dependencies because they can’t wrap their heads around a complex dependency graph and the required tooling.
arealaccount 5y ago
Its basically a social network for new developers.
- cphoover 5y ago
  explain this comment?
  - arealaccount 5y ago
    Npm is primarily hosted out of github where your code posts get stars, followers, etc. This drives user engagement, encourages tons of content, and helps new entrants network with other developers. There is good content in there for sure but it’s mostly just the code versions of Facebook posts
cphoover 5y ago
Really terrible take seeing as Javascript devs span all areas of focus and every level of experience, and education. I've seen plenty programmer's with CS degrees make terribly dumb mistakes, and some self-taught developers are some of the smartest people I've worked with. There are more javascript developers, because JS is far and away the most popular programming environment due mainly to its ubiquity on the web. Because of that the JS supply-chain is a much larger attack surface than most languages.
- evocatus 5y ago
  The self-taught developers of today are a far, far cry from the self-taught developers of yesteryear. Self-taught developers were once ardent hobbyists hailing from an era before (we had quite this much) aggressive commercialization of the internet. They found it fun to make computers blink pretty colors. Self-taught developers today heard you could make a quick buck from the profession.

by pluc 5y ago

fshbbdssbbgdd 5y ago

This is what’s known as a “just-so story”. In an alternate universe you could tell the same story to explain why js devs only copy/paste code and never use dependencies because they can’t wrap their heads around a complex dependency graph and the required tooling.

arealaccount 5y ago

Its basically a social network for new developers.

cphoover 5y ago
explain this comment?
- arealaccount 5y ago
  Npm is primarily hosted out of github where your code posts get stars, followers, etc. This drives user engagement, encourages tons of content, and helps new entrants network with other developers. There is good content in there for sure but it’s mostly just the code versions of Facebook posts

cphoover 5y ago

Really terrible take seeing as Javascript devs span all areas of focus and every level of experience, and education. I've seen plenty programmer's with CS degrees make terribly dumb mistakes, and some self-taught developers are some of the smartest people I've worked with. There are more javascript developers, because JS is far and away the most popular programming environment due mainly to its ubiquity on the web. Because of that the JS supply-chain is a much larger attack surface than most languages.

evocatus 5y ago
The self-taught developers of today are a far, far cry from the self-taught developers of yesteryear. Self-taught developers were once ardent hobbyists hailing from an era before (we had quite this much) aggressive commercialization of the internet. They found it fun to make computers blink pretty colors. Self-taught developers today heard you could make a quick buck from the profession.