3 ms·
> would understand the implications of using a library like leftpad and rely solely on trusted functions like isEven instead. Tangent — how is isEven trusted?
by scintill76 2y ago
> would understand the implications of using a library like leftpad and rely solely on trusted functions like isEven instead.
Tangent — how is isEven trusted? It seems people usually categorize leftpad and isEven pretty similarly (e.g. pointless bloat deps waiting to be next supply-chain attack), so I don’t follow the distinction you’re making.
- abofh 2y agoI was absolutely snarking on NPM's collection of libraries - so that pointing to 'libraries exist' isn't necessarily a good point; Stupid libraries exist, expertise is knowing which ones to pick. Both of them would get you laughed out of a code-review in my org.