← Back to context

Comment by notpachet

4 days ago

I feel like there are merits to your argument but that you have a larger anti-JS bias that's leaking through. Not that there aren't problems with Node itself, but as many people have pointed out, there are plenty of organizations writing in Node that aren't pwn'd by these sorts of attacks because we don't blindly update deps.

Perfect is the enemy of good; dependency cooldown etc is enough to mitigate the majority of these risks.

6 comments

notpachet

Reply
jacquesm  4 days ago

> I feel like there are merits to your argument but that you have a larger anti-JS bias that's leaking through.

Familiarity breeds contempt.

  • user34283  4 days ago

    What's the problem?

    I think JS is great. It's simple, anybody can use it.

    TypeScript is excellent too. The structural type system is very convenient.

    It's not going to replace Rust in cases where performance is essential or where you want strict runtime type checking or whatever, but for general use and graphical applications JS seems like a great pick.

    I often hear people complain about JS, but really, how is it any worse than say Python?

  • notpachet  4 days ago

    The truth is typically somewhere in the middle. I feel you though. I'm that way with Ruby/Bundler.