I hope that whatever solutions we come up with to handle the too-many-dependencies problem don’t stifle people’s motivation to create and share new packages. It’s not a given that useful libraries are going to exist. Too much friction and people will just stop sharing code.
-
Show this thread
-
So yeah, nobody will shed a tear if we curtail use of left-pad, but let’s make sure we don’t kill the next regex, clap, structopt, crossbeam, hashbrown, winapi, tokio, or serde.
3 replies 4 retweets 57 likesShow this thread -
Replying to @pcwalton
Umm, my experience from the sidelines is that regex, clap, tokio and serde are toxic. I haven't really heard of the others (I said sidelines).
2 replies 0 retweets 0 likes -
-
Replying to @ian
But would Rust be a better language if regex, clap, and serde did not exist? I think the answer is pretty clearly no.
1 reply 0 retweets 3 likes -
about serde I'm absolutely sure answer is "yes". I regret this library exists and other libraries have it not just as dependency, but they also limit their API so you can't replace serde.
1 reply 0 retweets 0 likes -
Replying to @eugeniyoz @ian
Serde is the reason WebRender is a security improvement in Firefox.
1 reply 0 retweets 1 like -
okay, I'm glad serde is good for your needs. For my needs their approach to parsing is unacceptable, so it's really annoying that I have to avoid some crates because they can't work without serde. Just in case if you were asking for opinions :)
1 reply 0 retweets 0 likes
I do think that crates should put serde support behind a feature flag. But Serde’s existence is important. Right now removing win32k in Firefox—a big security improvement—is predicated on transitioning to WebRender, precisely because we use Serde there.
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.