undefined | Better HN

0 pointsdgellow1mo ago0 comments

Why would you want DB drivers and S3 clients in your runtime? That’s exactly what 3rd parties are for, you don’t want to have to update your runtime for a new version of your drivers

0 comments

3 comments · 2 top-level

tpetry1mo ago· 1 in thread

And a bug in a dependency you can fix easily. One in the runtime is much harder to fix and you then must compile new versions.

NetMageSCW1mo ago

And a supply chain attack is much easier with too many dependencies as well.

pier251mo ago

Every approach has its pros and cons. OTOH the less you rely on third party deps, the less attack surface.

j / k navigate · click thread line to collapse