HNHacker News
TopNewBestAskShowJobs

shadymoney

1 karma · joined August 20, 2025

questions, comments, or concerns: webmaster@shady.money
submissionscomments
shadymoney··on Shai-Hulud Returns: Over 300 NPM Packages Infected
> Including headers isn't remotely "simple". There's so many considerations in linking, .SO version compatibility, architecture and instruction set issues, building against multiple versions on the same system. Or if you want to feel frustrated in a single word: GDAL (IYKYK)

I'd say for issues with instruction sets is a minor edge case, you could argue that having layers of abstraction gives even more room for fault.

That said I am not familiar with GDAL, but from google-fu it seems relatively heavy. Being said, I don't have much familiarity with compiling CXX programs as I do with programming C programs, and C with it's smaller footprint tends to not give me as many problems.

Again, this is from personal experience.

shadymoney··on Shai-Hulud Returns: Over 300 NPM Packages Infected
This is why I am not a huge fan of separate package managers for libraries, such as in the case of rust, or node. The C style of sharing deps. couldn't really be simpler as just including the headers in your Makefile.

We really don't need more package managers other than the ones provided by your operating system, but I dunno maybe its just me.