61
"Look at how all these much smaller package ecosystems don't have the problems of the largest one."
is the tl;dr of this article.
Npm having a lot of packages at least partially a problem of lacking standard library, no? And partially developer culture where every trivial thing is a package. Anyway, similar thing will happen to rust soon enough (*looks at 1 gig of dependencies for a cli program*).
I made a wrapp er script named npm on my $PATH that passes input to pnpm instead because of this. I don't think my team is ready to adopt something like that, but it seems to be working okay so far. Nobody has complained.
Npm repos violate iso27002. So, it's out. And we remember why iso27002 is important when we see news like this.
Oooh nice
this post was submitted on 16 May 2026
61 points (100.0% liked)
Hacker News
4870 readers
496 users here now
Posts from the RSS Feed of HackerNews.
The feed sometimes contains ads and posts that have been removed by the mod team at HN.
founded 2 years ago
MODERATORS