News for hackers. Stuff that matters.
Re:We should all be using dependency cooldowns by gr4vityWall on Friday November 21, 2025 @12:10PM (#46006379)
The Debian stable model of having a distro handle common dependencies with a full system upgrade every few years looks more and more sane as years pass.

It's a shame some ecosystems move waaay too fast, or don't have a good story for having distro-specific packages. For example, I don't think there are Node.js libraries packaged for Debian that allow you to install them from apt and use it in projects. I might be wrong.

Re:We should all be using dependency cooldowns by kykat on Friday November 21, 2025 @12:13PM (#46006423)
It is possible to work with rust, using debian repositories as the only source.
Re:We should all be using dependency cooldowns by embedding-shape on Friday November 21, 2025 @12:29PM (#46006615)
> For example, I don't think there are Node.js libraries packaged for Debian that allow you to install them from apt and use it in projects

Web search shows some: https://packages.debian.org/search?keywords=node&searchon=na... (but also shows "for optimizing reasons some results might have been suppressed" so might not be all)

Although probably different from other distros, Arch for example seems to have none.

Re:We should all be using dependency cooldowns by o11c on Friday November 21, 2025 @03:14PM (#46008450)
Locally, you can do:

  apt-cache showpkg 'node-*' | grep ^Package:
which returns 4155 results, though 727 of them are type packages.

Using these in commonjs code is trivial; they are automatically found by `require`. Unfortunately, system-installed packages are yet another casualty of the ESM transition ... there are ways to make it work but it's not automatic like it used to be.

Re:We should all be using dependency cooldowns by 9dev on Friday November 21, 2025 @05:39PM (#46009880)
> Unfortunately, system-installed packages are yet another casualty of the ESM transition ...

A small price to pay for the abundant benefits ESM brings.

Re:We should all be using dependency cooldowns by o11c on Friday November 21, 2025 @07:18PM (#46010718)
Honestly, I don't see the value gain, given how many other problems the JS tooling has (even ignoring the ecosystem).

In particular, the fact that Typescript makes it very difficult to write a project that uses both browser-specific and node-specific functionality is particularly damning.

Re:We should all be using dependency cooldowns by gr4vityWall on Sunday November 23, 2025 @02:21PM (#46026451)
> there are ways to make it work but it's not automatic like it used to be

Out of curiosity, what would you recommend? And what would be needed to make them work automatically?

Re:We should all be using dependency cooldowns by o11c on Sunday November 23, 2025 @09:19PM (#46029669)
Some solutions include: add a hook to node on the command line, fake a `node_modules`, try to make an import map work, just hard-code the path ... most of this is quite intrusive unlike the simple `require` path.

I really don't have a recommendation other than another hack. The JS world is hacks upon hacks upon hacks; there is no sanity to be found anywhere.

Re:We should all be using dependency cooldowns by noosphr on Friday November 21, 2025 @03:24PM (#46008567)
Never mistake motion for action.

An eco system moving too quickly, when it isn't being fundamentally changed, isn't a sign of a healthy ecosystem, but of a pathological one.

No one can think that js has progressed substantially in the last three years, yet trying to build any project three years old without updates is so hard a rewrite is a reasonable solution.

Re:We should all be using dependency cooldowns by gr4vityWall on Friday November 21, 2025 @03:48PM (#46008811)
> No one can think that js has progressed substantially in the last three years

Are we talking about the language, or the wider ecosystem?

If the latter, I think a lot of people would disagree. Bun is about three years old.

Other significant changes are Node.js being able to run TypeScript files without any optional flags, or being able to use require on ES Modules. I see positive changes in the ecosystem in recent years.

Re:We should all be using dependency cooldowns by noosphr on Friday November 21, 2025 @06:05PM (#46010130)
That is motion not action.

The point of javascript is to display websites in the browser.

Ask yourself, in the last three years has there been a substantial improvement in the way you access websites? Or have they gotten even slower, buggier and more annoying to deal with?

Re:We should all be using dependency cooldowns by FridgeSeal on Friday November 21, 2025 @09:34PM (#46011549)
No but the devs can push slower, buggier, more annoying websites to prod, faster!

And after all, isn’t developer velocity (and investor benefits) really the only things that matter???

/sssss

Re:We should all be using dependency cooldowns by throwawayqqq11 on Saturday November 22, 2025 @03:48AM (#46013257)
> modern websites

Your are comparing the js ecosystem and bad project realizations/designs.

> Action vs motion

I think the main difference you mean is the motivation behind changes, is it a (re)action to achieve a meassurable goal, is this a fix for a critical CVE, or just some dev having fun and pumping up the numbers.

GP mentioned the recent feature of executing ts, which is a reasonable goal imo, with alot of beneficial effects down the line but in the present just another hustle to take care about. So is this a pointless motion or a worthy action? Both statements can be correct, depending on your goals.

Re:We should all be using dependency cooldowns by gr4vityWall on Saturday November 22, 2025 @12:57PM (#46016716)
> The point of javascript is to display websites in the browser.

I don't follow. JavaScript is a dynamic general purpose programming language. It is certainly not limited to displaying websites, nor it's a requirement for that. The improvements I mentioned in the previous post aren't things you'd get the benefit of inside a web browser.

Re:We should all be using dependency cooldowns by mkoubaa on Friday November 21, 2025 @08:14PM (#46011111)
The stable model usually implies that your app has to target both the old and the new distro version for a while. That is a bit too much to ask for some, unfortunately