"A little copying is better than a little dependency."
post
replies:
Depend on abstractions. This isn't hard. 🤷
When I do a security audit on apps with hundreds of dependencies, I die a little bit
replies:
Another level of this dilemma:
- Pin all dependency versions – Prevents receiving security patches
- Don’t pin dependency versions – Enables supply chain attacks (see https://nesbitt.io/2026/02/03/incident-report-cve-2024-yikes.html)
Reuse is only good in the context of 90s era OO programming wisdom of "Coupling is bad, cohesion is good".
replies:
10 comments in c/programmerhumor@lemmy.ml view that post
vibe code all the dependencies to avoid license infection
Took me a bit. I was staring at it for a while thinking 'What part of this is socially awkward?'
replies:
in-line all your code and avoid the linker :-)
Or just copy paste the file with your utility code from project to project, with no way of tracking it. Spending time trying to find the most up-to-date copy is just part of the fun!
replies:
Vibe coding is basically poorly rewriting dependencies.
all 11 comments