|
|
|
|
|
|
by lesuorac
1120 days ago
|
|
|
> I would assume most places would turn away from the “node.js” way of doing these things and would just write internal versions of things they need. Incorrect assumption, look up the left pad fiasco [1]. Its importance is really a personal opinion; convince nearly always trumps security so if the NPM way allows you to increase sales by ~10% you'll see people continuing to do it. Google is fairly principled though, all of the 3p code is internally vendored and supposed to be audited by the people pulling in that code/update. [1]: https://www.google.com/search?q=leftpad+broke+the+internet |
|
|