News for hackers. Stuff that matters.

A comment on Why does a new Rails app need 106 MB of JavaScript?. Parent comment

Re:Why does a new Rails app need 106 MB of JavaScript? by johannes1234321 on Wednesday July 01, 2020 @04:32PM (#23706247)
Xcode is from a single vendor, whom I trust as much as I trust the operating system.

With rails and npm I probably trust Rails and see them as license-wise ok, but due to version requirements I might get "newer" versions of a package, which hasn't been veted by Rails devs, might use different license, might do stuff I don't want it might add in even other new deps.

[ Parent | on HN ]
Re:Why does a new Rails app need 106 MB of JavaScript? by isochronous on Wednesday July 01, 2020 @04:40PM (#23706358)
Then all you have to do is specify the specific version you want in your package.json, rather than a semver range, and you'll never get a version you haven't explicitly approved.
[ Parent | on HN ]
Re:Why does a new Rails app need 106 MB of JavaScript? by johannes1234321 on Wednesday July 01, 2020 @05:28PM (#23706927)
Of each of the dependencies Rails installs.
[ Parent | on HN ]
Re:Why does a new Rails app need 106 MB of JavaScript? by schwartzworld on Wednesday July 01, 2020 @08:22PM (#23708495)
don't use an opinionated framework then?
[ Parent | on HN ]