#NPM left-pad repository situation

46 messages · Page 1 of 1 (latest)

lime hearth
#

[ Redacted ]

What are your thoughts on this?

#

Why are javascript developers like this? hmmCat

topaz hazel
#

First 10 mins is prime getting things completely wrong and making himself look like an idiot. Pretty standard for him.

burnt quarry
#

were not like this.. these packages are slipped into major packages that everything depends on because some random guys get horny at the thought of their meme package getting installed a lot

topaz hazel
#

As for the article I think it tries to hold itself in some pretty dumb points. The issue with small packages isn't that they're small and you're a bad developer if you can't write it yourself. The issue is the spread of dependency reduces your ability to audit, and in particular with the js ecosystem you rarely ever care about your whole dependency tree (because they're are so many), so you could be installing anything.

burnt quarry
#

probably the most egregious example is isnumber which literally just uses the built in number class and has like 80m weekly downlods or smth ridiculous

#

people arent actually installing these packages (knowingly)

topaz hazel
#

The two main issues come from javascript having a poor standard library (still) and the js ecosystem build tools not dealing with the issue of tree shaking early enough. If this had been focused decades ago in sure we'd be in a place where you have a small number of large utility libraries that you'd include but get shaken down into what you actually use when you go to deploy

tacit smelt
#

What a thoroughly moronic take, and what a vehemently unpleasant streamer.

#

The underlying problem is the lack of a few good packages that provide a wide range of functionality, and the reason for that isn't about programmers not being able to do things right, but that this is JavaScript and you can't compile your program with its libraries and strip out everything you don't use.

#

Putting together other people's work to get stuff done is exactly what programming is, demanding you rewrite simple things is elitist nonsense.

pulsar berry
#

hahah i actually did a small paper on npm and the dependency chain and how dangerous it could be

frosty crater
#

Have never touched JS so might be misunderstanding but if it's some small utility can't you just copy paste it somewhere to ensure it would be safe instead of having potential dependency issues down the line?

I would understand it more if it was something complicated and you wanted to give credit where it's due.

topaz hazel
frosty crater
#

True, didn't think of that

burnt quarry
#

im curious why yall seem to dislike prime tho.. most ppl ive met like/recommend him

pulsar berry
#

the amount of implicit dependencies people have installed has increased plentifold

#

after left pad, npm took responsibility and made it extremely difficult to delete your dependencies

topaz hazel
# burnt quarry im curious why yall seem to dislike prime tho.. most ppl ive met like/recommend ...

I mean just from the context of this specific video, why would he include his rant on the code for leftpad when his own solution was crap. He didn't bother to consider that the leftpad in the realworld has been battle tested for both quality and performance. He just memed that it could be written in one line of code (which is actually 3 if you format like someone sane). The rest is just a dumb take on a dumb article 🤷‍♂️
I don't watch a whole lot of his stuff but the few videos I have seen suggest this isn't the only time he's had whack takes on things.
The whole thing about "if you can't make your own leftpad don't code" thing is just gatekeepy bullshit for 0 reason except memes. Which is bad because a lot of new programmers find content creators like this because of the memes, but don't really understand the consequences of it because they're new.

#

Another time I recall was watching him completely fail to understand the concept of bitshifting and overflows. Because of that behaviour he started shitting on javascript and calling it a terrible language despite the majority of other languages dealing with the scenario he was testing in exactly the same way. Again all this leads to is beginners sharing these stupid takes

burnt quarry
#

ive found his performance videos interesting but the reaction stuff is mostly just him and some random medium article both completely misunderstanding the topic lol

pulsar berry
#

he's memeing from what ive seen

#

its funny to participate in language wars

tacit smelt
#

"Why do you call him an idiot? All he does is act like one" :')

north harness
#

I mean, streamers really just create personas. It may be sad but it works, look at all his subs lol.

burnt quarry
#

i was just curious cuz like i said i liked some of his videos.. always interested to hear dissenting opinions especially if they have bonus context (i only found out about him like 1-2mo ago and never checked out his stream directly)

bitter bobcat
#

dude claims to work at netflix, but hasn't even leaked the netflix codebase. making chumps of all of us

burnt quarry
#

true

north harness
#

He works at netflix

#

Idk why you'd try to take a shot at that

bitter bobcat
#

still hasn't leaked all the netflix source

pulsar berry
#

Damn I didn’t know there were so many prime haters 😔

#

I personally find him entertaining and lots of the things he talks about are interesting and he makes it funny

bitter bobcat
#

yeah I like his content too

pulsar berry
burnt quarry
pulsar berry
#

^

tacit smelt
#

It's probably mostly just kids watching the loud personality; more's the pity, as he's a shoddy role model.

burnt quarry
#

what makes him a bad role model?

tacit smelt
burnt quarry
#

i dont rly get those vibes from him tbh but ill pay closer attention

tacit smelt
#

It's all directly in the text of the linked video :')