|
I've been getting some GitHub security warnings for packages which are added by the Node/ElectronJS project template.
You get a warning that you should update some package you've never heard of, however:
1. they don't explain the actual best way to update.
2. searching for explanations of how to update provides only esoteric and cryptic answers
3. after implementing the fix and updating, I'm not sure how I get GitHub to re-test to let me know if the problem is resolved.
It's quite annoying.
It is no wonder that we all ignore security alerts and just hope the hackers don't find us. 
And, of course, the real issue is the dependence upon hundreds or even thousands of dependencies that are just shoved into your project. 
I only have myself to blame for building on this framework, but it is so enticing when you see things work. 
|
|
|
|
|
I've had this issue with NuGet, which does a hard check for the installed version.
I've had this package that required a dependency to be version 1.x at most and another package that required the same dependency to be at least version 2.
Ergo, my project wouldn't build 
For some reason that only happened once or twice, you'd think that happens more often.
Luckily, most packages don't specify a maximum version (and they shouldn't, use at own risk!) and a lot are backwards compatible too.
npm is a nightmare in that respect.
You get literally hundreds of packages, rarely the latest and you don't know what depends on it
Backwards compatibility is also hard to verify because there's no type checking or anything.
On an unrelated note, if you need LINQ or proper collection types in JavaScript without any further dependencies, check out arrgh.js (see my sig) 
|
|
|
|
|
Thanks for commiserating with me on the state of package mangers.
It's just the nature of things now. There are a lot of things that different development environments are like, "we'll handle that for you" and we take it for granted.
Then, later, you learn they don't really handle it all for you and you have to dive into esoteric details of some build or packaging system -- and at that point you may as well have just managed it yourself all along the way.
|
|
|
|
|
|
I've come across them before.
Good stuff, but most of the time I ignore the problem (a non-proposal, but it's worked mostly fine except when it didn't)
|
|
|
|
|
Sander Rossel wrote: but it's worked mostly fine except when it didn't
That's the exact problem. Works great. Greatest thing ever. Fantastic! Really great how it just works.
Then one day...not working!!! Terrible!! Can't get it to work!! It's all crap!!
|
|
|
|
|
I don't get the fuss over github. It seems like everything has to be command line based. I don't use it much, thankfully, but it feels too linuxy.
Social Media - A platform that makes it easier for the crazies to find each other.
Everyone is born right handed. Only the strongest overcome it.
Fight for left-handed rights and hand equality.
|
|
|
|
|
You are definitely correct that it is very much command-line based and linuxy. There are tools to make it less so. But I like the command-line control. It's quite easy.
Here's what is very nice about using GitHub:
1. creating a common location (repository) that is easily accessible to anyone* on web so they can get your project.
2. the beneficial value of change tracking and versioning.
*Often times anyone means myself. I can check in a project at work and pull the changes at home and voila I have a great code repository that I can work on from anywhere. The ease is very addictive.
Also, remember, I'm really complaining about NPM, Node and package mangers in general.
GitHub itself is just annoying in this case because it warns me of things I need to fix without providing me of details of how to fix those things.
Of course, since GitHub is just a repository the problems can be related to any kind of project (C#, C++, Python, Node, React, etc).
|
|
|
|
|
|
I hope people won't lose their mind and start dumping (or worse) pets (and other animals), like they hoarded toilet paper and wrecked 5G towers (if they even were)
|
|
|
|
|
They're lucky they're in the US.
In the UK, a mob of utter prats would have tried to set fire to the zoo.
I wanna be a eunuchs developer! Pass me a bread knife!
|
|
|
|
|
Makes me wonder how the Tiger got it, since the zoo has been closed for a while now.
Makes me wonder how many more are infected in the zoo.
Makes me wonder how many animal handlers are infected, and how many humans and animals they are infecting, and probably don't even realize they are.
|
|
|
|
|
I'm sure the virus is nearly everywhere and has been for some time. So, I'm not so sure all this hiding in our homes will really do much.
Social Media - A platform that makes it easier for the crazies to find each other.
Everyone is born right handed. Only the strongest overcome it.
Fight for left-handed rights and hand equality.
|
|
|
|
|
The point of hiding in your house isn't to prevent you from getting the virus. It's to prevent everyone from getting it at nearly the same time and overwhelming the hospitals.
|
|
|
|
|
Yes, I understand. You may have missed the part of my post that says we've all probably been exposed to it already. If so, then hiding won't likely do much good.
Social Media - A platform that makes it easier for the crazies to find each other.
Everyone is born right handed. Only the strongest overcome it.
Fight for left-handed rights and hand equality.
|
|
|
|
|
Your assumption that we've all been exposed is the problem. We all haven't been. That's the point of hiding, To slow down the infection rate (reduce the R0 value as much as possible).
|
|
|
|
|
It's believed one of the tiger's handlers/caregivers (face it, cats don't have keepers or owners) was infected and transmitted it to the cat.
|
|
|
|
|
Maybe they shared a 5G cell phone? Or follow each other on instagram?
Social Media - A platform that makes it easier for the crazies to find each other.
Everyone is born right handed. Only the strongest overcome it.
Fight for left-handed rights and hand equality.
|
|
|
|
|
I’m ok. I always practice 2 metres social distancing from tigers anyway
|
|
|
|
|
I melted an ice cube with the power of my mind.
It took longer than I thought it would.
I'm working on improving performance.
".45 ACP - because shooting twice is just silly" - JSOP, 2010
-----
You can never have too much ammo - unless you're swimming, or on fire. - JSOP, 2010
-----
When you pry the gun from my cold dead hands, be careful - the barrel will be very hot. - JSOP, 2013
|
|
|
|
|
|
Maybe you were too cold, and your mind works better on warmer days.
I wanna be a eunuchs developer! Pass me a bread knife!
|
|
|
|
|
you're not so hot after all ! 
I'd rather be phishing!
|
|
|
|
|
Obligatory xkcd
Freedom is the freedom to say that two plus two make four. If that is granted, all else follows.
-- 6079 Smith W.
|
|
|
|
|
I bet those same powers can make paint dry.
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
