You’re using a Node.js framework so you npm install its package. But that package has six dependencies so they get installed too. But wait, there’s more! Each of those dependencies have their own dependencies, and each of those dependencies also have dependencies! Rince and repeat until your one package becomes 9000.

Moral of the story, Node.js packages are pathogens.

  • Ephera
    12·
    3 years ago

    This happens in Rust, too, and I definitely find it scary.

    I recently wrote a little web server, which streams the music files in a folder.

    Lines of code I wrote: 90
    Direct dependencies: 2
    Actual dependencies: 154