News for hackers. Stuff that matters.

A comment on SharpScript. Parent comment

Re:SharpScript by mythz on Monday August 19, 2019 @06:48PM (#20742481)
left pad is a transitive dependency issue, running an "Always up-to-date" version is no different to visiting a Website that can be shutdown at anytime, except once you've run a Gist App once, you can run it locally offline indefinitely:

https://sharpscript.net/docs/gist-desktop-apps#run-apps-offl...

So you have the flexibility of both options [1]:

     web open App # downloads and runs latest version
     web run  App # runs local offline version
[1] https://sharpscript.net/docs/gist-desktop-apps#github-sharp-...
[ Parent | on HN ]
Re:SharpScript by newacctjhro on Monday August 19, 2019 @09:32PM (#20743158)
The difference is that web apps are on a tight sandbox.
[ Parent | on HN ]
Re:SharpScript by mythz on Monday August 19, 2019 @10:05PM (#20743286)
The issue with leftpad was that it was a transitive dependency that was yanked and broke everyone depending on it. Gists don't have any dependencies, their encapsulated within the Gist where all code is easily inspectable and publicly verifiable, maintained by a verified GitHub User and all changes have a public audit trail.

Yes the sandbox is the difference between Desktop Apps and Web Apps, which is the point, Desktop Apps can do things Web Apps can't do and when you're running a Desktop App you're trusting the publisher just like you are with every other process running on your System.

[ Parent | on HN ]