Hacker News new | ask | show | jobs
by ofrzeta 1308 days ago
You seem to have followed the development, but anyway in this blog entry they explain the motivation and the plans for the TS version:

https://mojojs.org/news/mojo.js-1-released

Among other things I find this quite interesting:

"Software supply chain attacks around NPM are a hot topic right now. And it can be quite problematic to audit your whole dependency tree. Thankfully, while the Perl version has no dependencies at all, in JavaScript we only have 23 trusted third party dependencies. And we are prepared to replace every single one of them if necessary, with a port of the battle-tested Perl implementation."

1 comments

I’ve been slowly working on a 0 dependency framework in Bun for similar reasons. The size of the average package-lock.json is absurd and nerve wracking.