← Back to context

Comment by cedws

7 days ago

I'm happy to see some LLM tooling in Go, I really don't want to touch anything to do with JavaScript/npm/Python if I can help it.

I'm guessing building this is what Charm raised the funds for.

Can’t hate on JS anymore, we have typescript now :)

  • If anything it makes me hate it more, because now you have a variety of build systems, even more node_modules heaviness, and ample opportunities for supply chain attacks via opaque transpiled npm packages.

    • I completely agree with you, but let's not pretend that Go's dependency manager is free from supply chain attacks vulnerabilities. The whole module mirror shenanigans took a hit on my trust of Go's module management.

      1 reply →

    • Fwiw, I compile to readable JS. No point minifying. If someone wants to use it in an app, they will do so anyway