I feel like everyone’s focusing on the wrong thing. The kerfuffle that happened had absolutely nothing to do with the size of the dependency. If jQuery or lodash disappeared from NPM, we’d suffer exactly the same problem. What we really need is a guarantee that a dependency won’t disappear.
1 Like
This we now have: http://blog.npmjs.org/post/141905368000/changes-to-npms-unpublish-policy
3 Likes
I agree that the size of the dependency isn’t the biggest problem but when micro-packages are glorified the number of dependencies goes through the roof.
Each dependency is an external piece of code that you have to know about.
3 Likes
It’s not just that you have to know about it. It gets worse.
Each and every dependency is another potential point of failure for you and your code.
4 Likes
This topic was automatically closed 91 days after the last reply. New replies are no longer allowed.