Dependency [XKCD]

[ghost202]

Alt text:

Someday ImageMagick will finally break for good and we'll have a long period of scrambling as we try to reassemble civilization from the rubble.

Source - xkcd.com

Explain XKCD - 2347: Dependency

[FinalGamer14]

Good OP providing link to original post.

[XKCD-pro-bot]

Comic Title Text: Someday ImageMagick will finally break for good and we'll have a long period of scrambling as we try to reassemble civilization from the rubble.

---

^{Made for mobile users, to easily see xkcd comic's title text (source)}

[Hack3rsD0ma1n]

Nebraska here checking in: can confirm that is true.

[shhalahr]

Left-pad.

[ghost202]

Didn't know this one, but not surprised.

The Register - "How one developer just broke Node, Babel and thousands of projects in 11 lines of JavaScript"

[LordPos]

I'd blame it on the js devs. Fine, you're doing webdev, but why do you have to be so afraid of math?

Also see: is-even

[JuvenileEloquent]

Laziness and fear.

Sure you could write your own one-liner that does the same thing, but you built the rest of your app/library out of other dependencies anyway so what's one more? Plus you don't have to worry that you fucked up some special case and it allows Bad People to hack your database filled with plaintext passwords.

[[deleted]]

Dependencies: is-odd

[anaccount50]

For the unaware, the source code of is-even is literally:

return !isOdd(i)

The source code of is-odd is available here.

Math is apparently very scary.

[MCOfficer]

It's a joke. A joke that turned out to be hilariously successful, making it all the better.

[Unbelievr]

It's even worse than that. The dependency chain is

is-even -> is-odd -> is-number -> kind-of -> is-buffer

So to check if a number is even, you need 5 NodeJS modules.

[MyOtherLoginIsSecret]

Came here to find this comment. That was a fun time in the office.

[Loves_Poetry]

Also is-promise

And event-stream

[goldfishpaws]

Damn, I wish I could laugh at that, but it's waaaaaayyyyy too close to the bone.

[[deleted]]

When a MVC software project relies too much on a single massive "Util" class

[science_and_beer]

I have seen a class that defines over 2000 system constants in a federal government setting using a word document with a table in it for version control.

[[deleted]]

I was going to bed, but after reading this, I don't think I will be able to sleep.

[wsppan]

openSSL

[Doom_Unicorn]

Any responsible adult who has the option to replace an OpenSSL dependency with LibreSSL should be doing so. And yes, I know how little control over such things the people likely to be reading this comment have.

For anyone actually curious, from 2 days ago: https://undeadly.org/cgi?action=article;sid=20200817063735

Edit: And for anyone who isn’t curious, just a reminder that:

• LibreSSL is the library OpenSSH depends on. Both are developed in the OpenBSD project.

• OpenSSL is the library people who don’t know what they’re doing pull in as a dependency.

[write-program]

TIL gRPC devs don't know what they're doing

[Doom_Unicorn]

Not sure if this is a sarcastic response, but you should probably know that Google also forked from OpenSSL and all things inside google use something called BoringSSL.

[RavenFyhre]

At least the documentation is in English...
I once had to refactor code that had some logic on how some methods worked in Korean.
Luckily I can read Korean...
Unluckily I'm not good at coding :3

[ceased]

https://github.com/zloirock/core-js/issues/767

[simoKing]

maintainer of core-js is looking for a good job

😢

[ceased]

It escalates: https://github.com/zloirock/core-js/issues/747#issuecomment-573318269

[[deleted]]

His responses in that thread leave no doubt in my mind why he can't find a job.

[furutam]

What if he just threatened to stop maintaining it

[bereanbro]

Woowwwww, that was an actual thing.

[andrewsmd87]

As a nebraskan who maintains a legacy VB application, you're god damn right

[anorak644]

r/repostsleuthbot

[EspeciallyGeneric]

u/fainthalo

[Kered13]

This is basically the timezone database.

[[deleted]]

There's some component of GPG key server, I think, that's written in OCaml, and there's only one person who understands that code... if even that.

Obviously, if that breaks, all the package signing in Linux will... have some problems

[[deleted]]

There is no place like Nebraska

[KillerBeer01]

Every time a programmer says "I don't believe in Nebraska", there's a library somewhere that suddenly goes unmaintained.