News for hackers. Stuff that matters.
Re:Left-Pad (2024) by baobabKoodaa on Wednesday June 11, 2025 @07:18AM (#44246379)
While you are correct, the problem compounds when popular package developers choose to use tiny packages.

I don't need left-pad.

But maybe I need react-starter-kit.

Now, imagine that react-starter-kit has a dependency to markdown-js-blobber, which has a dependency to make-text-nice, which has a dependency to left-pad.

In this scenario I am now "pulling in a package to pad a string". If I am "smart enough to use a package manager", I should be "more than capable to write..." an alternative to react-starter-kit..?

Re:Left-Pad (2024) by jstanley on Wednesday June 11, 2025 @07:32AM (#44246475)
The onus there is on the "make-text-nice" developer, not an eventual user of "make-text-nice".
Re:Left-Pad (2024) by yurishimo on Wednesday June 11, 2025 @09:04AM (#44247172)
I don't place any blame here on the person using `react-starter-kit` and I think you're being a bit obtuse to suggest otherwise. It's the original person who pulled in a package for <10 lines of code who is to blame.
Re:Left-Pad (2024) by baobabKoodaa on Saturday June 14, 2025 @06:41AM (#44275534)
I provided the real reason for the high download counts of these packages.