News for hackers. Stuff that matters.
Re:Node.js packages don't deserve trust by nirvdrum on Monday April 11, 2022 @10:31AM (#30989274)
I think the reason is JS doesn't have much of a standard library. Java, C#, Ruby, Python, Rust, Go, and many others come with a large library you can use to write non-trivial applications without ever needing to fetch an external dependency. JS, particularly outside of Node, doesn't have that. To get functionality most other languages/runtimes include out of the box, you need to write a bunch of code yourself or pull in a dependency to use someone else's implementation.
Re:Node.js packages don't deserve trust by ragnese on Monday April 11, 2022 @11:13AM (#30989936)
It may be more about the quality rather than the quantity, though. Rust's standard library isn't very big. People sometimes complain that we have to fetch dependencies that are so ubiquitous that they are effectively part of standard Rust: crates like rand, futures, bytes, etc.

But even JS's built in string stuff isn't so bad that it somehow justifies leftpad existing, so I don't know...