logoalt Hacker News

dakiolyesterday at 8:23 PM1 replyview on HN

Over 50 npm dependencies (dev and non-dev). Is this really how things are developed in 2026? After all what's happening (cyber security), is any developer out there running this kind of software just like that in their main machines without any concerns?


Replies

trollbridgetoday at 2:34 AM

It is if someone forgot to prompt their harness "don't pull in unnecessary dependencies".