Stories
Slash Boxes
Comments

SoylentNews is people

SoylentNews is powered by your submissions, so send in your scoop. Only 5 submissions in the queue.
posted by martyb on Thursday January 24 2019, @10:25PM   Printer-friendly
from the ask-the-PHB dept.

Russ Cox, who developed the dependency/package management system for Go, writes about the problems with software dependencies. A choice excerpt:

Dependency managers now exist for essentially every programming language. [...] The arrival of this kind of fine-grained, widespread software reuse is one of the most consequential shifts in software development over the past two decades. And if we’re not more careful, it will lead to serious problems.

A package, for this discussion, is code you download from the internet. Adding a package as a dependency outsources the work of developing that code [...] to someone else on the internet, someone you often don’t know. By using that code, you are exposing your own program to all the failures and flaws in the dependency. Your program’s execution now literally depends on code downloaded from this stranger on the internet. Presented this way, it sounds incredibly unsafe. Why would anyone do this?


Original Submission

 
This discussion has been archived. No new comments can be posted.
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
  • (Score: 2) by MostCynical on Thursday January 24 2019, @11:15PM (3 children)

    by MostCynical (2589) on Thursday January 24 2019, @11:15PM (#791483) Journal

    If systemd continues to grow, it will be a complete OS soon enough.

    --
    "I guess once you start doubting, there's no end to it." -Batou, Ghost in the Shell: Stand Alone Complex
    Starting Score:    1  point
    Karma-Bonus Modifier   +1  

    Total Score:   2  
  • (Score: 4, Funny) by fadrian on Friday January 25 2019, @12:32AM (1 child)

    by fadrian (3194) on Friday January 25 2019, @12:32AM (#791521) Homepage

    Don't worry - by that time, emacs should have absorbed enough AI to fight it.

    --
    That is all.
    • (Score: 0) by Anonymous Coward on Friday January 25 2019, @04:20AM

      by Anonymous Coward on Friday January 25 2019, @04:20AM (#791603)

      systemd should implement the emacs doctor psychotherapist

  • (Score: 3, Insightful) by DannyB on Friday January 25 2019, @04:47PM

    by DannyB (5839) Subscriber Badge on Friday January 25 2019, @04:47PM (#791856) Journal

    I'm not worried about systemd growth. Nor about the size of Emacs. Neither of these have grown anything like the bloat growth and new features of Java. A sprawling bytecode VM managed runtime with GC that grows and is almost an entire OS unto itself.

    --
    Stupid people exist because nothing in the food chain eats them anymore.