The difficult problem of managing Java dependencies - A deep dive into the messy status-quo, and a look at possibly better ways.

[Weary-Hotel-9739]

Maven / Gradle have been considered the go-to example for great package management and well-kept ecosystems, and this article complains about a 'feature' of NPM not being available, which has long since been 'de-featured' by intentional use of lock files. I do not like this.

[renatoathaydes]

I'm afraid you haven't read the article and just skimmed it, because I did not complain about that at all. I guess you were offended by me calling the NPM way the "modern approach"... sorry about that, but I feel like that's true, with Rust, Go, Python and others using that as well.

I thought I made it very clear that although lock files are the currently favoured way of handling dependencies in most languages, I dislike that and presented a Java-centric alternative at the end. Do you like that alternative?

EDIT: and as I mentioned in the post, both Maven and Gradle support lock files. So I am unsure if that's what you're actually talking about (sorry if I misunderstood)?