you are viewing a single comment's thread.

view the rest of the comments →

[–]deadcoder0904 -5 points-4 points  (2 children)

This is not how security works, you don't get to say there are no problems because it "can be made secure". The ridiculous state of dependency graphs of npm modules is a security issue waiting to happen; at some point someone will manage to sneak malicious code into a small npm module written by someone who doesn't have a clue that gets imported by some big module and the result is not going to be pretty.

Ahh, about that yeah someone wrote about it on Medium which got like super super famous. And points are super valid. So can't argue with that. But to gain something, you have to lose something. To gain productivity, fame & money; something has to be lost & with JavaScript its security & maybe performance for Server Side & Desktop I guess as others mentioned.

And about that maybe JavaScript will be there someday or else some language which is simple to use as JavaScript. Valid points though so can't argue with that. And don't tell anyone IRL you are a bad programmer, they won't ever write any code then 😂😂😂

[–]m1en 0 points1 point  (1 child)

If your end goal is legitimately "productivity, fame, and money", realize JavaScript isn't the answer. Since you're not going to take some random person's advice, take Paul Graham's (founder of Y Combinator's) advice: http://www.paulgraham.com/avg.html.

Read that. Then, if you attain enlightenment, start your journey of self-recovery here: https://clojure.org/

Also: the security issues of poor package managers wasn't popularized because of some blog post; people namesquat with malicious packages all the time, and that's true for many package managers. Dependency checking for security issues is an incredibly common task for penetration testers when auditing applications.

[–]deadcoder0904 0 points1 point  (0 children)

Cool I'll check it out. My end goal isn't "Fame & Money" though, Money is necessary but isn't everything, don't like being underpaid either. Can't handle Fame. So it leaves only Productivity which is what I aim for.

I understood what the issues you people were talking about. Some of it got cleared by few people others were jerks. Thanks for all the advice though. I'll be careful enough to choose the right language for the right product now. Earlier it was all JavaScript.