Hacker News new | ask | show | jobs
by gaius 3025 days ago
No. You can spend 10x as long downloading random libraries and utilities looking for the perfect one than it would take to just write the function you need, and then you haul in a massive stack of dependencies that makes your project fragile and your build times long. I see projects now with literally hundreds of external dependencies. And if one of them breaks or suffers a security compromise you are toast. Say no to PyPI, NPM, Github and all the rest.
1 comments

HUuuum idk about security being a problem now a days. The community overlook in an opensource library vastly outweighs my capabilities of writing secure libraries.
The community overlook in an opensource library

Haha really? https://mail.python.org/pipermail/security-announce/2017-Sep...

It’s the Wild West out there. And then there’s NPM...