161
Every dependency you add is a supply chain attack waiting to happen (benhoyt.com)
submitted 7 months ago by to c/programming@programming.dev
30 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] 7 points 7 months ago (3 children)

Favour programming languages with a good and stable standard library.

  • permalink
  • fedilink
  • source
  • hideshow 3 child comments
    •
  • [–] 3 points 7 months ago (2 children)

    I think the only mainstream language with a standard library that is both good and comprehensive is Go. All of the others either have smaller standard libraries (e.g. Rust) or poorly designed ones (Python).

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 5 points 7 months ago (1 child)

    Java, .net and C++ have standard libraries that are much bigger and much more battle tested than the one of Go.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 4 points 7 months ago

    I haven't used Java for decades and never used .net so I'll take your word for those. Absolutely not for C++ though.

    Go's standard library has:

    • JSON, XML, etc.
    • A web client and server
    • Bigints
    • Logging
    • JPEG, PNG and GIF
    • SQL client
    • SSH client
    • All the crypto algorithms
    • Gzip, zlib, deflate, etc.

    C++ has none of that. Hell C++ only got a function to check if a string starts with a prefix a few years ago.

  • permalink
  • fedilink
  • source
  • parent