Startups should not use React

Re:Startups should not use React by CityWanderer on Monday August 21, 2017 @08:19AM (#15063985)

If what you say is true then I think our tool chains are failing us.

My React project has 1,015 dependencies (directories in node_modules). If I didn't have locked versions then every minor automatic update could bring in more dependencies without me knowing.

Can anyone honestly say they've done such due diligence?

[ Parent | on HN ]

Re:Startups should not use React by Silhouette on Monday August 21, 2017 @08:25AM (#15064029)

Can anyone honestly say they've done such due diligence?

That seems doubtful.

And that's a real and potentially serious problem, because IP laws typically don't contain any exemptions for code you're using that infringes someone's IP rights just because it was contributed by a third party.

[ Parent | on HN ]

Re:Startups should not use React by Vinnl on Monday August 21, 2017 @09:58AM (#15064651)

I agree that that would probably fall into the same category as saying that you've read the terms and conditions.

That said, the amount of dependencies you have locally installed is likely to be a multitude of the number you'd get if you'd exclude devDependencies, which I'm guessing don't count.

[ Parent | on HN ]