NoNameProvided

In the risk reduction tab, it should compare the vulnerability count against the node-slim image. In my eyes, it takes away from the offering when they try to prop up the vuln count for the official images, and nobody deploys `node:latest`.

I understand the general point you're making, but the pg package isn’t a good example. It has 6 deps, not 13, and 5 of those are internal packages from the same monorepo without additional dependencies. There’s only a single external dependency, and that one brings in just one additional package.

In my opinion, the pg repo and packages are an example of how OSS stuff should be maintained. Clean repo, clean code, well-maintained readme, and clearly focus on keeping things simple instead of overcomplicating.

Thank you!

Can somebody provide an archive link? Trying to access the site, I get a Cloudflare security page that says my access has been blocked by some security rules.

The target audience also includes Angular developers. NestJS emulates several aspects, such as modules, that it doesn't necessarily need to mimic Angular's appearance.

I cannot pass judgment on whether this is good or bad, but I can easily see how this familiarity can be beneficial for the average programmer.

> For a long time NestJS depended on class-validator ... and regularly suffers from security vulnerabilities that can take years to fix.

As a maintainer of class-validator, I'd like to clarify that this is not accurate. Legitimate security issues, when reported, are promptly addressed. The multi-year security alert listed in NIST NVD is akin to the bogus report that the curl maintainer discussed a few months ago.

In a nutshell, the report suggests that specific settings can potentially lead to validation bypass, which is indeed the case because these settings determine whether unknown objects should fail or pass the validation. This is analogous to my creating a CVE for Windows simply because anyone can access my computer when I haven't set a password.

However, the other part about the scare support is sadly true though.

I think the most bad rep for RxJS comes from using it when it is not needed.

Parent comment said:

> But the problems they solve are also unintuitive.

Do you consider calling a JSON API unintuitive or complex? If not, then you may be using the wrong tool. If you need nothing else, you are perfectly fine using a promise.

If you need to await extra requests, transform them, and react to other events then you need RxJS. For a simple call, you do not.

> I would imagine most people’s use case (mine certainly is) for RxJS boils down to “call a JSON API and receive a response”. That shouldn’t be a hard problem

Do you consider the following code hard to understand or are you are making requests in a more complex way?

``` this.network.get('<url>').subscribe(response => <do whatever you want here>) ```

Even if we agree to disagree that the above code snippet is hard to understand, you can just convert it to a promise:

``` const response = await lastValueFrom(this.network.get('<url>')) ```

> I can just note that our Angular code seems to be much harder to maintain than our React code.

A big part of maintainability comes from the quality of code and/or existing experience with the two frameworks, not the frameworks itself.

I work at an Angular only shop, if we would write some React it would be probably harder to maintain for us than the Angular ones.

Angular did have it, it is called RxJS.

Thanks for this! There are more than 400 comment here, so my post will be probably buried instantly but I just need to share this with someone!

I just have finished playing A Plague Tale: Requiem[1] a few days ago, and I spent the last two days with this strange feeling of sadness, almost grieving. It is such a masterpiece of emotions, the story of the bond of a sister and brother who went through hell to save the boy.

I remember the first game had the same effect when I played it the first time. For days I felt the with a mix of sadness and happiness. The developers have been successful creating such a strong bond to the characters that I felt I am practically there next to them, experiencing the pain and happy moments alike.

I really suggest everyone who has the smallest intention to play games to experience these two masterpieces[2][3]. (You definitely need to play the first game to be able to experience the second to its fullest.)

Since we are on HN, one technical detail that impress me so much the number of unique animations they created to give life to the word around us and to show the bond between the two of them. Like how Amicia waits for Hugo to get down from the ladder every time or how Amicia picks Hugo up multiple times during the storyline to carry him.

Thanks for letting me share this, I hope all of you have a nice day!

[1]: https://www.youtube.com/watch?v=zoEwC2TxiMA [2]: https://store.steampowered.com/app/752590/A_Plague_Tale_Inno... [3]: https://store.steampowered.com/app/1182900/A_Plague_Tale_Req...

From OP post:

> ...team is great and lot of interesting challenges...

A great team and exciting challenges are a strong retaining factor, and I dare to say, it's way harder to find a job that excites you than one which pays well.

It's worth a note that this was introduced with the latest DLC, and the AI currently is hopelessly broken as it does not understand the importance of defending your railway lines connecting your supply depots.

I am surprised no one said it yet. The usage of Github logo is now allowed as your own product branding[1]. You probably won't get into trouble, but still you should consider changing it.

[1]: https://github.com/logos

I just found out a few days ago when I have read about track gauge, that they literally built narrow train lines to transport ammunition at scale. Eg: https://nzhistory.govt.nz/media/photo/light-rail-ammunition-...

You can set Actions to required and then they will be displayed even when Actions is down and merge will be prevented.

> You just described every frontend framework. None of these are unique to Angular. Any developer with an understanding of JS can learn and use any framework in the exact same way.

You just summed up, why he said Angular is better in this regard. Yes any developer with experience CAN lean how to write good structured React apps. In Angular it is basically enforced.

An honest questions: How much have you worked with Angular? I have worked with it since the first release and what I see that it is steadily (albeit sometimes slowly) going into the right direction. Today the dev UX is great and differs nothing from that of using CRA for example. (If we are talking about tooling)

I live in east Europe in a country with public healthcare (our system even considered to be in bad state). However if I have to choose between spending the saving of my family and spending a week or a month in an ugly hospital, I choose the latter without thinking. The doctors doing the healing are the same, the quality is the same, only aesthetics differ.

There are problems with puclic healthcare that needs solving, but I would much rather focus on thoose problems than pumping insurace companies with money so private hospitals can charge 10x-100x the price of a treatmant (compared to Europe for example).

It's so surprising that nobody ever talks about the active nuclear policies the countries have. For example Russia states the following:

> With regard to nuclear weapons specifically, Russia reserves the right to use nuclear weapons: > - in response to the use of nuclear and other types of weapons of mass destruction against it or its allies, and also > - in case of aggression against Russia with the use of conventional weapons when the very existence of the state is threatened.

As long as NATO doesn't nuke something first or the very existence of Russia is not threatened, they should not use nukes.

From this part on I am speculating only, but I believe if Putin would press the red button the officers would have the right to refuse to execute the order.

Just to be clear the Budapest Memorandum doesn't say anybody needs to nuke anybody. It only says that the sovereignty and borders of Ukraine, Belarus and Kazakhstan must be respected. One can respect those borders without going to war and just keep protesting in the UN.

I had the impression that RT is a propaganda tool[1] for the Russian government not an independent news organization.

[1]: https://www.politico.eu/article/russia-propaganda-disinforma...

> I don't think azure-docs repo is the right place to ask for help/suggestions as maintainers are not very responsive because their sole job is to push internal docs to public docs.

What place would you suggest? We had bad experience with Azure support we could never fight through on the first support line.

> However, I believe you could have set up "public IP prefix" using azure cli. I do not think you needs a azure managed firewall.

I don't have deep experience in networking stuff on Azure so my understanding can be wrong, but I think "public ip prefix" is just a group of continuous IP addresses what you can reserve. You still need to assign those to something eg a NAT Gateway. As far as I know you cannot assign them directly to an Container Instance.

We use Azure at work and this article hit home hard. As we just have been burned recently by Azure pricing. I am in the same spot as the author: liking Azure but being put off by all the weird stuff sometimes they are doing.

In our case, all we wanted was a static IP in front of an Azure Container Instance. Easy right? Let's put the container in a vNET, place a NAT Gateway in front of it and we are done. However, for some reason NAT Gateway is not supported for Container instances, instead, the official documentation suggests setting up an Azure managed firewall in front of your container that starts at a whopping 600EUR/month. That is a steep price increase from your ~30ish EUR/month for a basic container instance and it doesn't seem to be any other official alternative.

I have opened an issue with the docs team [1] about it and I hope there is another way of doing this that doesn't incur a doubling of our Azure monthly spending.

[1]: https://github.com/MicrosoftDocs/azure-docs/issues/81274

> If that is the case, then contributor's emails are being 'leaked' without their say-so or probably knowledge

When you login into the NPM CLI it printed in all caps that the given email address will be public.

I don't like this either about NPM, but it's not like they are leaking in, they are upfront about it and warn you that the registered email address will be accessible to anyone in the package metadata.

> and in some cases these generals sabotaged the oil effort.

This sounds interesting, do you have any sources about this?

> His generals really screwed up the Eastern theatre in the late 1940s.

My limited understanding of the eastern front is that: a, Hitler ordered the initial attack despite the warning of his generals b, forbid any (even tactical) retreat when the tides turned which eventually led to the destruction of multiple army groups.

I like the landing page a lot (with original header)! For me that quickly added image seems to be out of place and doesn't actually explain the usage of the app. In my opinion the original header was better at expressing a constant feel of the page.

Well played Epic, well played.

I am never sure, when it's not explicitly stated, so can somebody clarify it for me? These are gross or net annual base salaries? If gross, then what how much taxation is on it usually in the US? (As the majority of responses comes from the US currently)