logoalt Hacker News

tarkin2yesterday at 7:04 PM3 repliesview on HN

Isn't this the same for maven, python, ruby projects too? I don't see this as a web only problem


Replies

epistasisyesterday at 7:09 PM

Yes, and it isn't the only problem.

I think the continuous churn of versions accelerates this disregard for supply chain. I complained a while back that I couldn't even keep a single version of Python around before end-of-life for many of the projects I work on these days. Not being able to get security updates without changing major versions of a language is a bit problematic, and maybe my use cases are far outside the norm.

But it seems that there's a common view that if there's not continually new things to learn in a programming language, that users will abandon it, or something. The same idea seems to have infected many libraries.

izacusyesterday at 8:49 PM

No, it's absolutely not the same.

Kaliboyyesterday at 7:06 PM

Node is on another level though.

It's cause they have no standard library.

show 2 replies