[norman784]

If you care about security you will have setup your own node package registry with a curated/audited list of dependencies, then you need to point to the registry for the dependencies and maintain the registry.

With deno it should be easier to do this, you setup your own cdn, just upload plain js files and point it from your import map[1], the browser will take care of download/cache them all.

[1] https://wicg.github.io/import-maps/

[dmitriid]

> If you care about security you will have setup your own node package registry with a curated/audited list of dependencies, then you need to point to the registry for the dependencies and maintain the registry.

Exactly. And it's quite easy to do.

> With deno it should be easier to do this, you setup your own cdn, just upload plain js files and point it from your import map

I was waiting for the inevitable just.

- Just set up your own CDN.

- Just upload a plain js file there (where do I get those files from?)

- Just point to dependencies using a feature that, quote "is not a W3C Standard nor is it on the W3C Standards Track"

- And then the browser... record scratch who said anything about a browser?