Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Nice. Additionally we should be using dependency limits and dependency moderation.

Half of my job when reviewing work is telling junior devs to try to do something without the dependency. Usually they just learn about a very basic skill.

"Ok so you downloaded a thing called apscheduler, what does that do?" "So it's like cron?" "Can you use threads, or even better just use a separate process?" "Cool"

My (least) favourite example is the amount of juniors that download a dependency from a random indian dev to store and read credentials from .env . Just open() and read() the security critical file my dude.



Consider applying for YC's Fall 2026 batch! Applications are open till July 27.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: