SebastianVerified account

I'm interested in this topic: It might not be an issue for svelte, but I've recently come aware that a high percentage of npm modules bundle their deps, thus killing any option of deduping them during delivery. Hyping no-deps seems like a dangerous pathway

agree, hyping is not the goal. It is fascinating since it is pretty much counter to all other modern projects. The delta here is worth thinking about.

Like anything it's a trade-off. In the case of build-time tools like Svelte and Rollup I think it's worthwhile, because faster installation time and guarantee of no version mismatch bugs far outweighs saving a few kb inside node_modules

Isn’t that why locked dep versions exist? E.g. package-lock.json

All well and good if all your dependencies have lockfiles for the package manager you happen to use. Regardless, lockfiles only solve the reproducible builds problem; they don't solve the fact that installing tons of dependencies is slow

Also flaky - if any of hundreds of registry metadata requests fail, then the whole npm install fails. Occasional issue for Angular CLI users.

totally! more developers should try working on Amtrak WiFi — we'd change our 'best practices' very quickly