You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
After the left pad debacle, there was a great idea for avoiding ever having a dependency problem that also has a lot of other benefits. Roll all of your dependencies into your package... even a node package. This improves download times, and prevents bugs from ever accidentally showing up. Also prevents security issues that enterprises may be worried about.
Also make sure that the dependencies wrapped up into the package get a copyright mention for their MIT license as well as ensure that the package.json removes the dependency section on build for publishing so it shows up as a package with no dependencies in NPM.
The text was updated successfully, but these errors were encountered:
After the left pad debacle, there was a great idea for avoiding ever having a dependency problem that also has a lot of other benefits. Roll all of your dependencies into your package... even a node package. This improves download times, and prevents bugs from ever accidentally showing up. Also prevents security issues that enterprises may be worried about.
https://medium.com/@Rich_Harris/how-to-not-break-the-internet-with-this-one-weird-trick-e3e2d57fee28
Also make sure that the dependencies wrapped up into the package get a copyright mention for their MIT license as well as ensure that the package.json removes the dependency section on build for publishing so it shows up as a package with no dependencies in NPM.
The text was updated successfully, but these errors were encountered: