3 ms·
Do you check _their_ dependencies though? And do you check every file?
by maccard 3y ago
Do you check _their_ dependencies though? And do you check every file?
- throwaway290 3y agoI don't check every file but I use very sophisticated proprietary heuristics such as "intuition" and "hunch" for how far to dig. I use vim so dependencies are explicit. But when using npm packages in work I give dependencies a look before I look anywhere else. An unfamiliar dependency gets looked at. It's easier since npm web browser allows inspecting code. It's a very imperfect process.
- qup 3y agoHave you ever caught anything?
- throwaway290 3y agoNo, that would be a different story:) ended up not using dozens of plugins and libs stuff after a look at their dependencies and code though
- anthk 3y agoEmacs has deps on libraries such as pdf-tools with mupdf and telega with tdlib, but these are installed from the OS repos so they are trustful.
- Jorengarenar 3y agoOnly handful of Vim plugins have dependencies and even then you need to install them explicitly