logoalt Hacker News

Groxxyesterday at 5:46 PM3 repliesview on HN

"Batteries included" means "ossification is guaranteed", yah. "stdlib is where code goes to die" is a fairly common phrase for a reason.

There's clearly merit to both sides, but personally I think a major underlying cause is that libraries are trusted. Obviously that doesn't match reality. We desperately need a permission system for libraries, it's far harder to sneak stuff in when doing so requires an "adds dangerous permission" change approval.


Replies

nazcantoday at 3:17 PM

100% to libraries having permissions. If I'm using some code to say compute a hash of a byte array, it should not have access to say the filesystem nor network.

lokartoday at 3:26 AM

Golang seems to do a good job of keeping the standard library up to date and clean

show 1 reply
diablevvyesterday at 6:37 PM

[dead]