Russ Cox, who developed the dependency/package management system for Go, writes about the problems with software dependencies. A choice excerpt:
Dependency managers now exist for essentially every programming language. [...] The arrival of this kind of fine-grained, widespread software reuse is one of the most consequential shifts in software development over the past two decades. And if we’re not more careful, it will lead to serious problems.
A package, for this discussion, is code you download from the internet. Adding a package as a dependency outsources the work of developing that code [...] to someone else on the internet, someone you often don’t know. By using that code, you are exposing your own program to all the failures and flaws in the dependency. Your program’s execution now literally depends on code downloaded from this stranger on the internet. Presented this way, it sounds incredibly unsafe. Why would anyone do this?
(Score: 0, Funny) by Anonymous Coward on Thursday January 24 2019, @10:50PM (1 child)
The obvious reason is that they are a millennial. As one of the most ludicrous generations ever to exist (safe zones, full-stack tattoos, pink hair, near-infinite gender choices, etc), linking in a program from a complete stranger is par for the course for them.
(Score: 0) by Anonymous Coward on Sunday January 27 2019, @03:48AM
You neglected to mention ginormous hair-buns. In my neck of the woods, the bitches wear their hair in huge buns, smack on the top of their heads. They look like they're growing new heads on top of their existing ones.