logoalt Hacker News

NoNameProvidedtoday at 12:04 AM1 replyview on HN

I understand the general point you're making, but the pg package isn’t a good example. It has 6 deps, not 13, and 5 of those are internal packages from the same monorepo without additional dependencies. There’s only a single external dependency, and that one brings in just one additional package.

In my opinion, the pg repo and packages are an example of how OSS stuff should be maintained. Clean repo, clean code, well-maintained readme, and clearly focus on keeping things simple instead of overcomplicating.


Replies

pier25today at 2:52 AM

You still need to pull 13 extra deps that could be compromised.