• 5 Posts
  • 143 Comments
Joined 1 year ago
cake
Cake day: June 26th, 2023

help-circle








  • Speaking specifically about npm: A ton of packages used as dependencies for a million different things have very loose quality control, some even merge community PRs straight to release without checking the code in any way. More often than not I have run into packages maintained by people with no connection to the original dev and don’t even know how its code actually works.

    I remember a couple years ago I needed to read zip64 files so I picked up the zip file definition and implemented the read operation for it in the package we were using for zips. I only implemented a very small subset of the format to strictly solve my problem. I opened a pr to them saying “here’s some quickstart of you plan to add full support for zip64” - next time I checked they has merged my pr as if was and now were having folks registering issues for incomplete zip64 support.




  • Over the past decades I’ve had several different women (girlfriends, mother-in-laws, coworkers) complain that I “acted too softly” in some situation or another, saying I should have raised my voice or made threats or stuff like that. If I could go back in time I wouldn’t act differently in any of those situations.

    In your case I would probably complain to someone about security not showing up though. In a hospital setting it is their responsibility.