you are viewing a single comment's thread
view the rest of the comments
[–] 4 points 1 year ago* (1 child)

Sure, in many cases the dev's computer is powerful enough to handle that.

However:

  • The more the dependencies, the more likely it is to pull-off a supply chain attack. Any of those thousands modules can be compromised and infect either the user or the developer.
  • Not all computers are optimized for working with so many tiny files. Have you ever worked in a company that uses McAfee Antivirus? Even Defender can be a massive performance hit in some cases.
  • source
  • parent
  • hideshow 1 child comment
  • [–] 2 points 1 year ago

    I have to say that I may be a bit ignorant, because I'm mostly engaged in greenfield projects with very tiny devteams and I always keep my dependencies count low as possible

    Thank you for pointing this out, that's very valuable to keep in mind

  • source
  • parent