News for hackers. Stuff that matters.

A comment on Today’s JavaScript, from an outsider’s perspective (2020). Parent comment

Re:Today’s JavaScript, from an outsider’s perspective (2020) by pkgland on Friday May 27, 2022 @08:13AM (#31528621)
Regarding point 4: more people need to realise picking the right NPM package in the JS ecosystem is becoming a "must-have" skill, but the only way to find the right package is still to be constantly up-to-date with the ecosystem, endless google searches or hoping someone on Twitter can just tell you what's better.

This is why I built https://pkg.land/ (beta), append NPM package name to the url and a list of alternatives will be suggested. See https://pkg.land/colors

[ Parent | on HN ]
Re:Today’s JavaScript, from an outsider’s perspective (2020) by lucideer on Friday May 27, 2022 @06:21PM (#31535601)
FWIW, I work in security and this skill is becoming very well automated in that domain.

It's imperfect (and always will be), but there's a large overlap between manageable libraries and securable[0] libraries.

[0] In the software-composition analysis field, "securability" is not only about upgrading vulnerable libraries but also about how many vulnerable transitive dependencies you may have to upgrade in future.

[ Parent | on HN ]