Reply to post:

What happens when the maintainer of a JS library downloaded 26m times a week goes to prison for killing someone with a motorbike? Core-js just found out

vogon00

@ac:

You say : 'If every chunk of free software had some sort of “foundation” to supervise it, productivity would plummet.'.

I say/FTFY : If every chunk of free software had some sort of supervision it, quality would improve.

IMO, the bottom line is either PAY ATTENTION TO AND UNDERSTAND YOUR DEPENDENCIES (Shouting is intentional!) and update your code when necessary, or 'snapshot'; things at your release time and include all deps in *your* release as absolutes.*

Understanding dependencies involves both your code, and and how it is used by 3rd/4th/5th/Nth parties..

I get soooo fucked-off with code/systems/applications that suddenly fail due to someone changing one or two lines in a dependency that the author didn't know they had.

Is it just me. or do people no longer know or care what they are doing? Why write a package/system with *your* name on it when it can be crippled by someone else, by design or accident?

Learn what dependencies means in your context, and take the necessary steps...

*The software equivalent of nuking the site from orbit - it;s the only way to be sure :-) Old quote I know, but stop being age-ist, you!

POST COMMENT House rules

Not a member of The Register? Create a new account here.

  • Enter your comment

  • Add an icon

Anonymous cowards cannot choose their icon