Re:Nx compromised: malware uses Claude code CLI to explore t...
by littlecranky67 on Wednesday August 27, 2025 @11:24AM
(#45040987)
Killer feature of NX is its build cache and the ability to operate on the git staged files. It takes a couple of minutes to build our entire repo on an M4 Pro. NX caches the builds of all libs and will only rebuild those that are affected. Same holds true for linting, prettier, tests etc. Any solution that just executes full builds would be a no-starter for all use cases.
Re:Nx compromised: malware uses Claude code CLI to explore t...
by halflife on Wednesday August 27, 2025 @11:52AM
(#45041336)
Don’t forget task dependency tree, without that you will have a ton of build scripts
Re:Nx compromised: malware uses Claude code CLI to explore t...
by littlecranky67 on Wednesday August 27, 2025 @11:21AM
(#45040941)
I've burried npm years ago, we are happily using yarn (v4 currently) in that project. Which also means, even if we were affected by the malware, noboday uses the .npmrc (we have a .yarnrc.yml instead) :)
Re:Nx compromised: malware uses Claude code CLI to explore t...
by crabmusket on Wednesday August 27, 2025 @10:48AM
(#45040490)
I'd recommend pnpm over npm for monorepos. Forcing you to be explicit about each package's dependencies is good.
I found npm's workspace features lacking in comparison and sparsely documented. It was also hard to find advice on the internet. I got the sense nobody was using npm workspaces for anything other than beginner articles.
Re:Nx compromised: malware uses Claude code CLI to explore t...
by threetonesun on Wednesday August 27, 2025 @11:08AM
(#45040777)
In the context of what we're talking about here, using the default package manger to install a different package manger as a dependency has never quite sat right with me.
And npm workspaces is certainly "lacking features" compared to NX, but in terms of making `npm link` for local packages easier and running scripts across packages it does fine.
Re:Nx compromised: malware uses Claude code CLI to explore t...
by crabmusket on Thursday August 28, 2025 @08:17AM
(#45051248)
Yes, I've found the experience of getting pnpm quite irritating/confusing. Corepack doesn't seem to work the way I would want it to, either.
Re:Nx compromised: malware uses Claude code CLI to explore t...
by dboreham on Wednesday August 27, 2025 @10:59AM
(#45040634)
After 10 years or so enduring the endless cycle of "new thing to replace npm", I'm using: npm. And I'm not creating monorepos.
Re:Nx compromised: malware uses Claude code CLI to explore t...
by crabmusket on Thursday August 28, 2025 @08:18AM
(#45051259)
I was happily using npm until I outgrew it. pnpm seemed the smallest step towards what I needed after having evaluated nx, moonrepo etc.
I will say, I was always turned off by NX's core proposition when it launched, and more turned off by whatever they're selling as a CI/CD solution these days, but if it works for you, it works for you.