Re:Shai-Hulud Returns: Over 300 NPM Packages Infected
by Yasuraka on Tuesday November 25, 2025 @06:00AM
(#46044657)
Nope. Know the difference.
[ Parent
| on HN ]
Re:Shai-Hulud Returns: Over 300 NPM Packages Infected
by eptcyka on Tuesday November 25, 2025 @09:30AM
(#46046060)
How is Go any worse or better than Rust when it comes to the ease of adding dependencies?
Re:Shai-Hulud Returns: Over 300 NPM Packages Infected
by Yasuraka on Tuesday November 25, 2025 @09:51AM
(#46046257)
I read your comment as in, comparing to node, my bad.
With regards to Rust, crates are packages which may include opaque binaries, e.g. serde_derive, and the stdlib is weak, so imports of thousands of lines of code are basically necessary for otherwise fundamental features like async.
It's probably easier to add dependencies in Go, but in the end people/projects don't.