3 ms·
I thought that CLI would be efficent when I looked for using it and then I figured it is JavaScript
by nicce 6mo ago
I thought that CLI would be efficent when I looked for using it and then I figured it is JavaScript
- rvz 6mo agoExactly. That is the problem. There is a time and place for where it makes sense and a password manager CLI written in TypeScript importing hundreds of third-party packages is a direct red flag. It is a frequent occurrence. We have seen it happen with Axios which is one of the biggest supply chain attacks on the Javascript / Typescript ecosystem and it makes no sense to build sensitive tools with that.
- lxgr 6mo ago> importing hundreds of third-party packages But how else are you going to check if a number is even or odd? Remember, the ONLY design goal is not repeating yourself (or in fact anything anyone has ever thought of implementing).
- dannyw 6mo agoThat’s a serious red flag. I’m concerned and I don’t think it shows a security first culture.