Kira, a lil trans fox 🦊 on Nostr: I feel frustrated the way that software dev culture is being shaped, where older code ...

I feel frustrated the way that software dev culture is being shaped, where older code is rapidly treated as "bad" and "unusable", if not being constantly upgraded to the newest dependencies & style.

I had a user complaining on one of my repos that one its dependencies was potentially vulnerable to a DoS attack, given specific malicious user inputs. I looked at it, and it was reading from two package.json files on the user's local machine as inputs. I mean, I *guess* maybe *somehow* this could be used for evil, but I don't see how. It just seems like a silly reason to not use a module.

The feeling I get is that open source (especially npm) has been deeply infiltrated by corporate interests and culture, who of course have good reason to fear potential any potential for a DoS attack (costs money). But it sucks, to me, that this mindset has seeped into the wider culture, creating this environment of fear around code that isn't on the upgrade hamster wheel.