Hacker News Reader

I'm happy to see some LLM tooling in Go, I really don't want to touch anything to do with JavaScript/npm/Python if I can help it.

I'm guessing building this is what Charm raised the funds for.

View on HN

Can’t hate on JS anymore, we have typescript now :)

If anything it makes me hate it more, because now you have a variety of build systems, even more node_modules heaviness, and ample opportunities for supply chain attacks via opaque transpiled npm packages.

I completely agree with you, but let's not pretend that Go's dependency manager is free from supply chain attacks vulnerabilities. The whole module mirror shenanigans took a hit on my trust of Go's module management.

Go still has one of the best supply chain security stories of any language.

Fwiw, I compile to readable JS. No point minifying. If someone wants to use it in an app, they will do so anyway

Reply on news.ycombinator.com