News for hackers. Stuff that matters.

A comment on Compromised PyTorch-nightly dependency chain December 30th, 2022. Parent comment

Re:Compromised PyTorch-nightly dependency chain December 30t... by josefx on Sunday January 01, 2023 @02:46AM (#34204473)
> This isn't going to all fit into a standard library.

There is a size limit for standard libraries?

I think Java introduced modules and its dependency model so you could package only what your software needed.

[ Parent | on HN ]
Re:Compromised PyTorch-nightly dependency chain December 30t... by TuringTest on Monday January 02, 2023 @02:36AM (#34215354)
> There is a size limit for standard libraries?

There is a size limit to what language curators are able to maintain, yes.

The idea of the standard library is that it will select components that are general enough to cover a wide range of use cases; therefore the language builders ned time to review every new proposal, and their time is limited.

You may dump everything under the sun in the standard library, but then it won't be better than what you get from a library marketplace.

[ Parent | on HN ]