logoalt Hacker News

acdhatoday at 4:58 PM1 replyview on HN

It’s correct that NPM is not unique but it is the worst for cultural reasons: no other ecosystem started with such a limited language, which lead to the culture of publishing tons of small packages working around things which everything else had builtin. A Python project which has a hundred dependencies is considered quite large but the median React project had north of 30 thousand for years and years.


Replies

insanitybittoday at 5:16 PM

I think that's barely meaningful. Which of the compromised packages would have been part of any reasonable stdlib?

show 1 reply