5 ms·
Reading it I see this 50 extra packages are cursed There is a user in the JavaScript community who goes around adding "backwards compatibility" to project
by darkwater 1y ago
Reading it I see this
50 extra packages are cursed
There is a user in the JavaScript community who goes around adding "backwards compatibility" to projects. They do this by adding 50 extra package dependencies to your project, which are maintained by them.
which bring to this user: Jordan Harband https://github.com/sponsors/ljharb https://github.com/sponsors/ljharb
Does anyone know what they actually mean with that cursed knowledge point? And what's the "backwards compatibility" that Jordan also boasts in his GH profile?
- pcthrowaway 1y agoSeems like this thread answers your question https://news.ycombinator.com/item?id=37604373 https://news.ycombinator.com/item?id=37604373
- slaterbug 1y agoI don't have much to add myself, but there was a bit of discussion around this back in August that you might be interested in: https://news.ycombinator.com/item?id=44831811 https://news.ycombinator.com/item?id=44831811
- darkwater 1y agoWow! Didn't know Immich's Cursed page had already a dedicated post on HN. I love reading about opensource drama, especially if it's some technology I don't use directly, it's like watching a soap opera.
- 12345hn6789 1y agoThis user makes money of off how many downloads their packages receive. https://github.com/A11yance/axobject-query/pull/354#issuecomment-2184124757 https://github.com/A11yance/axobject-query/pull/354#issuecom...
- greggsy 1y agoWhat a dumpster fire. Is he really being paid per download, or is he just being sponsored? It’s not clear if either would imply some form of malicious intent either.
- whilenot-dev 1y agoTo not just link to another thread: The specialty of ljharbs issues sits somewhere between "JavaScript is a very dynamic programming language that grew a lot and quite fast" and "we cannot trust developers to do the right thing". His libraries tend to build up on older runtime implementations and freeze every used functionality during runtime, so they provide "second-run safety" and "backwards compatibility". Developers disagree with some of its effects, such as a grown dependency tree and impacts in performance of multiple magnitudes (as measured in micro-benchmarks). ljharb seems to follow a rather strong ideology, but is a member of the TC39 group and a highly trusted person.
- 12345hn6789 1y agoljharb is also conveniently paid per download. His actions border on malicious especially when viewing from a supply chain attack angle. https://github.com/A11yance/axobject-query/pull/354#issuecomment-2184124757 https://github.com/A11yance/axobject-query/pull/354#issuecom...
- silverwind 1y agoAlso, I imagine cost of the globally wasted CPU cycles is much higher than what he profits. It's a pure abuse of resources.
- pxc 1y agoIt definitely feels a bit strange and potentially alarming, but after reading through that whole thread he ultimately seems like a sincere person doing work that he thinks matters, now getting dogpiled for it.
- Sammi 1y agoI haven't found one person who agrees with him on what he thinks matters. His way is wasteful and slow and just indefensible.
- lpln3452 1y agoIf he had kept his strange and alarming behavior to himself, he wouldn't be 'getting dogpiled' for it now. The problem is that he's forcing his ways on others. If we're identifying an aggressor here, it's him. The project maintainers are the victims.