Un Preventable

Un Preventable
javascript-memes, npm-memes, dependency-hell-memes, supply-chain-attack-memes, node-modules-memes | ProgrammerHumor.io

The JavaScript ecosystem in a nutshell: we've built our entire infrastructure on a house of cards made by random strangers on the internet, and we're shocked—SHOCKED—when it occasionally collapses. "No way to prevent this," says the only ecosystem where installing a package to check if a number is odd pulls in 47 dependencies.

The satire here is chef's kiss. We literally trust pseudonymous maintainers with packages that have 10 million weekly downloads, then act surprised when supply chain attacks happen. "It's just the price of building modern web apps" is the developer equivalent of "thoughts and prayers." Maybe—just maybe—we shouldn't need 500MB of node_modules to display a button.

Fun fact: The average JavaScript project has more dependencies than a soap opera character has relationship drama. And about the same level of stability.

More Like This