NPM Considered Harmless

Sun, 26 May 2019 09:39:26 -0500

Throughout my career, I’ve run into a handful of people that have the opinion that we shouldn’t rely on a package manager, such as NPM or NuGet. The arguments fall into three main categories: concerns over security, concerns over the long-term availability of package manager services, and concerns over it being easier to manage dependencies yourself.

If you have any of these opinions, let me be the first to tell you it’s okay to rely on package managers such as NPM or NuGet. And there’s a variety of reasons why.

dependencies on Keith Ott: The Site

NPM Considered Harmless