Fuck that. It’s awesome! I want to have lazy initialized globals. It’s that package. I want code to shorten my builder pattern I import that. I need a typed concurrent work steel queue. No problem.
I look at a c project. Everywhere custom macros to do the most basic shit. I want to parse an xml in c? Better use a sax Parser and put all the data into globals. Cryptography? Better implement that ourselves… Using a library would be too much of a hassle.
NPM is already on the “isn’t” side of it. Specially with all the malware going around. Who has time to read the code of the dependencies of the dependencies of their dependencies? For every single version. It’s just not possible…
I guess the main concern with this is security. You’re literally running code you don’t even know about on your machine, probably next to personal files or your company’s code base.
A simple http call to publish all your private code wouldn’t be hard to sneak in a 6th level dependency.
There’s a password manager I use, but the CLI tooling sucks. Thankfully, there’s a third party CLI tool in a language I know fairly well, and because I’m a little paranoid, I reviewed the code. Then I reviewed the code of the libraries it imported. And then the code of the libraries of the libraries it imported. Thankfully, that was as far as it went, and I was mainly looking for any code that made network calls… it was manageable, just barely.
And I made some improvements and submitted PRs, only some of which were accepted, but I used them so I maintained a fork. Which was lucky, because a few months later upstream changed their parseargs library to a framework, and the dependencies exploded. 6 layers deep, and dozens of new dependencies - utterly unauditable without massive effort. I caught it only because of the rebase from upstream. I abandoned the rebase and now maintain a hard fork, of which I’m the only user AFAIK.
The moral of the story is that introducing dependencies under the guise of “reuse” is a poisoned fruit, a Trojan Horse. It sounds good, but isn’t worth it in the long run. The Go team got it right with their proverb: a little copying is better than a little dependancy.
Honestly, I don’t like the Go way. If they are going to have that philosophy, at least they should have provided a strong core with high level functions and generics. From the start. Not 5 years later.
Haha. At my partner’s job, IT had to send out an email clarifying some message from a VP wasn’t phishing because so many people reported it for being suspicious lol.
The Closed Alpha playtest isn’t an invitation to publicly review, it’s an invitation to playtest. They’re trying to gather data and feedback on an inherently feature-incomplete and unpolished game to help with development. There are going to be private channels for feedback and the playtest data itself is like feedback so public channels are redundant. Obviously Marvel is also just trying to dodge criticism, but that’s not a mutually exclusive reason.
Yeah this seems to be something people are missing. These tests sometimes prohibit all reviewing and commenting in their NDAs (including positive ones). It’s a playtest, not a beta, review copy or pre-release.
I literally got to be a part of a group that got to chat with astronaut Tracy Caldwell Dyson on the ISS yesterday afternoon. It was a really cool, candid, behind the scenes experience as she did a little mini-tour through the space station.
The craziest part for me was when she took her phone to the observatory and we watched the sun vanish behind the horizon of the earth. It happened so quickly and so brilliantly that it took my breath away and nearly brought me to tears. It was spectacular.
It was almost two hours with lengthy breaks as we lost contact a few times. But what an amazing experience.
It’s very much a factor of right place and right time.
For their mental health, the astronauts are required to have calls with people down here. Tracy is an acquaintance of someone my wife knows, so when the call was set up, we made the invite list.
We have no personal connection, we just managed to sit in the room while others talked. Tracy did put out an offer to come visit her at Johnson when she’s back, so you better believe we’ll follow up on that.
In preparation for the upcoming Bell Riots, WWIII, Eugenics Wars, First Contact, Battle of Wolf 359, and Dominion Wars, I say we stop beating around the bush and adopt the Bajoran 26 hour day.
files.catbox.moe
Top