Re: Pinned/fixed versions should be a requirement.

[Liliana Marie Prikler <liliana.prikler@gmail.com>]

Am Samstag, dem 09.09.2023 um 20:37 -0500 schrieb Distopico:
> 
> On 2023-09-10, Liliana Marie Prikler <liliana.prikler@gmail.com>
> wrote:
> > 
> > [bunch of stuff regarding Rust]
> 
> 
> Beyond Rust, an example of a language/packages ecosystem that does
> not follow semantic versioning at all is JavaScript/Npm. Most
> packages in node-xyz[1] do not reference a version; they simply use
> the global input. For now, the number of npm/node packages is small,
> but with time, that could become a problem.
I don't think that pinning versions is going to help us much in the npm
case.  The node packaging model allows inputs to be propagated beyond
reason.  And the response of those gazing into the abyss for any longer
than two seconds is quite often "fuck it, I'm out" [1].  I don't think
we'll get far in packaging node stuff without solving the more
fundamental issue of "how can I replace this JS file with this JS file
and not have my entire tower of dependencies break down?" and that is a
social issue as much as it is a technical one.

Cheers

[1] https://dustycloud.org/blog/javascript-packaging-dystopia/