Twitxy Saved

David Sherret

@DavidSherret

Software developer. Prev @deno_land. Working on ts-morph, dprint, and more.
Toronto, Canada github.com/dsherret Joined January 2009
446 Following 1.3K Followers 1.1K Posts

Latest posts 5

David Sherret @DavidSherret
Can't have CVEs in your dependencies if you have zero dependencies.
Jarred Sumner Verified account @jarredsumner Nov 4
What’s going to happen to open source?

A prediction:

Dependencies are over.

The same Brotli vulnerability impacted .NET, Node, Bun, Envoy and more. Dependencies are too big of a target.

When rewriting a dependency is one prompt away, why take the risk?
View quoted post on X
David Sherret @DavidSherret
It's very hard to innovate on module resolution in JS because the TS user experience would be bad.

TS needs something like content mappers, but for module resolution—you specify an npm package in a tsconfig and then TS sends it the raw specifier and referrer info to resolve.