4 ms·

I'd like to see a world where the JS community focused more on improving the stdlib across the browser and in nodejs - much like bun is doing. Common packages f

by deanc 2y ago

I'd like to see a world where the JS community focused more on improving the stdlib across the browser and in nodejs - much like bun is doing. Common packages for node such as mysql2, axios etc. are so widely used and are huge attack vectors should they ever be compromised.

DimmieMan 2y ago
Deno is perhaps a better example with browser API's, part off the winterTC committee and a growing set of std packages[1]. Possibly more importantly, it has a security model that defends against this kind of exploit. I will agree with the sentiment though, I get not wanting to jump on new shiny things but for some reason I keep getting the vibe that the community is closer to crab mentality than healthy skepticism, downright hostile towards any project making a genuine effort to improve things. [1]https://jsr.io/@std https://jsr.io/@std
- azemetre 2y ago
  My issue with deno and jsr is that it only exists at the discretion of VC funding. That does not feel like a sustainable ecosystem where the incentives are misaligned (wanting a return on capital versus proper open engineering).
sieabahlpark 2y ago
[dead]