• yessikg@fedia.io
    link
    fedilink
    arrow-up
    3
    ·
    19 hours ago

    When I do a security audit on apps with hundreds of dependencies, I die a little bit

    • CanadaPlus@lemmy.sdf.org
      link
      fedilink
      arrow-up
      1
      ·
      edit-2
      17 hours ago

      Does it matter what kind of dependancy? Like, sure, if it’s somebody’s 5-year-old school project that’s bad, I guess. (I’m experiencing this meme right now)

    • tatterdemalion@programming.dev
      link
      fedilink
      arrow-up
      17
      ·
      2 days ago

      Judgement call. When it’s something prone to change that’s hard to get right, duplicating it just creates more maintenance burden.

      • CanadaPlus@lemmy.sdf.org
        link
        fedilink
        arrow-up
        1
        ·
        17 hours ago

        Plus, it’s bloat. A snippet of extra code isn’t going to cause much trouble, but then you end up doing it a lot, and there’s snippets in the snippets, and all the sudden something that used to fit on a floppy is 3 gigs.

        I have no idea how much of a factor this is relative other various performance-sacrificing shortcuts, but Wirth’s law is a thing.

      • TootSweet@lemmy.world
        link
        fedilink
        English
        arrow-up
        8
        ·
        2 days ago

        For sure. But I’ve seen a lot more sins committed in the name of reusing code than in the name of minimizing dependencies.

  • nova_ad_vitum@lemmy.ca
    link
    fedilink
    arrow-up
    6
    arrow-down
    4
    ·
    2 days ago

    Reuse is only good in the context of 90s era OO programming wisdom of “Coupling is bad, cohesion is good”.