5 ms·
What you describe is exactly why people use dependencies. You just decided to trade your time for the noble act of having “no production dependencies”, while on
by laundermaf 4y ago
What you describe is exactly why people use dependencies. You just decided to trade your time for the noble act of having “no production dependencies”, while one of the 275 modules installed by Jest (real number) stole your production secrets anyway.
As for point 2, Node 18.1 I think just introduced a native argument parser.
- 2fast4you 4y agoWhy would the test dependencies have access to production secrets? They only get installed while developing
- hombre_fatal 4y agoThey still get run on a developer’s machine most of the time and are at least installed there where they can run arbitrary code on install. And there are juicy secrets beyond just production server secrets sitting on your laptop.