Re: Security concerns with minified javascript code
Neil Williams <codehelp@debian.org> writes:
> I still find it hard to believe that *so* much code is required to
> minify JS. The excuse that JS is "moving fast" is nonsense. The reality
> would appear to be that nobody actually *cares* about the mess, they
> just use it.
This is almost certainly correct.
> Usable software needs usable tools.
The problem is that this *is* usable for nearly all the people who
currently use it, who just run one command to install it and have all
those dependencies pulled from a remote repo for them. Because the
dependency installation process is so easy, they think no more about
adding new dependencies than we think about installing some application
with apt that happens to require a bunch of shared libraries.
In other words, the people developing and using this tool don't see this
as a problem, and therefore don't care about fixing it.
--
Russ Allbery (rra@debian.org) <http://www.eyrie.org/~eagle/>
Reply to: