Re:Malicious code in the purescript NPM installer
by littlestymaar on Monday July 29, 2019 @05:58AM
(#20552979)
Java was indeed a success, but its dependency management is archaic at best. Yes it's better than FORTRAN or C, but I wouldn't use it as a reference in 2019…
[ Parent
| on HN ]
Re:Malicious code in the purescript NPM installer
by LoSboccacc on Monday July 29, 2019 @07:42AM
(#20553464)
it's signed, hierarchical, decentralized, supports addressing multiple artifacts within the same module by type, includes a standardized way to retrieve sources or docs, supports pinning the version of transitive dependencies so you can manually resolve conflicts and on top of that can be extended to use completely alien package sources (which is unholy if you ask me, but it helped me survive the great osgi catastrophe of the 2010s thanks to tycho)