Miss Dada  🏳️‍⚧️

I tried writing some JavaScript today. I tried not to add any frivolous dependencies. I ended up with 18k dependencies. This is not a joke.

I'm not in the "every dependency you add is a liability camp", but... how do people find this acceptable? This is a large enough number I'd be surprised if none of them contained malicious code, just from statistics alone

npm is easy and convenient, that's why.

So is Cargo and Bundler, neither have this effect

I'd say big reasons are that Ruby and Rust have solid standard libraries and at least Ruby's runtime does not support multiple versions of the same library

Yeah, definitely a lot of things seem to stand in for what seems like it should be in the standard library. It gets exacerbated by the multiple incompatible ways of doing similar things in different contexts with no attempt to create a unified API for it