2026-03-22 19:27 UTC
Adding a single dependency to a Node project and seeing the impact on package-lock.json is like watching a tsunami "ripple" across the entire ocean surface of the planet.
Developers using Node don't care about software supply chain security because they simply can't.
Replies (2)
-
@TheServitor@sigmoid.social 2026-03-22 20:13
@martin npm ecosystem is garbage
-
@Yung_Lyun@mastodon.social 2026-03-22 20:19
@martin Wait, you actually "manage" the project, "manually"? (joking) #agentic_engineering