Alex Russell on Nostr: Per a conversation with a coworker, it turns out that one of my most unpopular ...
Per a conversation with a coworker, it turns out that one of my most unpopular opinions is that if you haven't read at least a large fraction of the code, you should not be adding it as a dep via NPM. Doubly so with transitive dependencies.
Published at
2026-05-29 20:07:53 UTCEvent JSON
{
"id": "ea4066845ada1742da4b8a8fd22d6e47931e3fcabbae8aadfec663d5639613ed",
"pubkey": "0a6a259cdd6b1549c96091aa012f0552bdc4a36f2585efffe059eeb235391ddc",
"created_at": 1780085273,
"kind": 1,
"tags": [
[
"proxy",
"https://toot.cafe/@slightlyoff/116659668451317910",
"web"
],
[
"proxy",
"https://toot.cafe/users/slightlyoff/statuses/116659668451317910",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://toot.cafe/users/slightlyoff/statuses/116659668451317910",
"pink.momostr"
],
[
"-"
]
],
"content": "Per a conversation with a coworker, it turns out that one of my most unpopular opinions is that if you haven't read at least a large fraction of the code, you should not be adding it as a dep via NPM. Doubly so with transitive dependencies.",
"sig": "facca8fef7b0fc9698d0f6e2feedec69186dc26417403928b9c32671a3d766f23b533e46662ba8dff3c0de87a566cd4498f7ab8b5b186d4ce7a0ed7323340542"
}
