3 ms·
I was on the both sides of the spectrum: from everythig custom-built to everything is a third-party dependency. I guess you managed to find the balance where i
by troupo 3y ago
I was on the both sides of the spectrum: from everythig custom-built to everything is a third-party dependency.
I guess you managed to find the balance where it works.
Because on the one side it often falls into "oh, we built a PDF writer, and a phone routing system, and a generalised build system from scratch, and now we have no one who knows how these work, how to upgrade them, or replace them". On the other side is "we've been running this PHP 4 project forever because the cost of upgrading every third-party library used across all the breaking changes is at least a three-year project, so we're better off not touching it" :)
- jddj 3y agoCore software is worlds apart from some client app. Dependencies get compromised, supply chain attacks are extremely real. If you write a webapp do whatever works for you. If you write software with a blast radius as large as SQLite's then please consider not pulling in some vulnerable third party lib for a nice to have.
- troupo 3y agohttps://news.ycombinator.com/item?id=38890181 https://news.ycombinator.com/item?id=38890181