3 ms·
Worse than Javascript's 5+ different types of mostly incompatible module formats, transpilers for different version targets, megalithic node_modules directories
by rcfox 3y ago
Worse than Javascript's 5+ different types of mostly incompatible module formats, transpilers for different version targets, megalithic node_modules directories and the community's love of importing new packages for one-line functions that can disappear and take down the internet?
- linkdd 3y agoHow is `node_modules` different from `/path/to/venv/lib/python3.X/site-packages` ? Are PyPI, cargo, Maven, etc... all immune to supply chain attacks?
- rcfox 3y agoOne major difference is a venv doesn't allow nested dependencies. With npm, you might install version 2.3 of a package, only to find that some other package has installed version 1.4 under itself. Python also has "wheels", which are pre-compiled distributions, rather than full-source distributions. These are often smaller and install faster.
- heywhatupboys 3y ago> One major difference is a venv doesn't allow nested dependencies. With npm, you might install version 2.3 of a package, only to find that some other package has installed version 1.4 under itself. a feature not a bug. Anyone who ahs built a sufficiently large project and had to abandon some dependencies know this pain
- jeltz 3y agoYes. Which is quite impressive.
- deleted 3y ago[deleted]
- whywhywhywhy 3y agoAs much as we all have criticized the npm ecosystem, after seeing what exists in the python world I actually came round to it and consider it very good.
- ddaaeuggg4446 3y agoJavascript is a larger technical mess once you pull it open and look inside. But for day to day use it's much better than Python. They've done a fantastic job overall allowing you not to need to worry about all the different formats and transpilers and whatnot.