• jim3692@discuss.online
    link
    fedilink
    arrow-up
    2
    ·
    edit-2
    10 hours ago

    Sure, in many cases the dev’s computer is powerful enough to handle that.

    However:

    • The more the dependencies, the more likely it is to pull-off a supply chain attack. Any of those thousands modules can be compromised and infect either the user or the developer.
    • Not all computers are optimized for working with so many tiny files. Have you ever worked in a company that uses McAfee Antivirus? Even Defender can be a massive performance hit in some cases.
    • ddplf@szmer.info
      link
      fedilink
      arrow-up
      1
      ·
      8 hours ago

      I have to say that I may be a bit ignorant, because I’m mostly engaged in greenfield projects with very tiny devteams and I always keep my dependencies count low as possible

      Thank you for pointing this out, that’s very valuable to keep in mind