6 ms·
If this is what will take for folks to move away from JS ecosystem, I'll take it.
by rochak 4mo ago
If this is what will take for folks to move away from JS ecosystem, I'll take it.
- renox 4mo agoBah, I think that these kind of vulnerabilities exist in any "packaging ecosystem" where the base language offer "ambient authorities"(any library can access your filesystem) which is .. all of them! AFAIK only research languages do not provide these ambient authorities :-(
- jollyllama 4mo agoThis x1000. This is the culmination of 15 years of frontend dev culture. Why does RedHat even have an NPM repo?
- kogasa240p 4mo agoSeconded
- czbond 4mo agoI am not a JS dev, but had to interact with the ecosystem some. It became so bad I won't install anything without it being in a Docker or Podman container.
- OrangeMusic 4mo agoI honestly don't understand how you could do JS on the backend in 2026. This language and ecosystem are so bad it's ridiculous. Almost all other options (yes, even PHP) are better. On the browser at least you have the excuse that there's no other option (hoping Wasm will eventually kill JS for good, but we're not there yet).