On the bright side, if someone fixed the library then the bug would be fixed for everything downstream of it. This wouldn't be true if everyone rolled their own. The problem seems to be a lack of...
On the bright side, if someone fixed the library then the bug would be fixed for everything downstream of it. This wouldn't be true if everyone rolled their own.
The problem seems to be a lack of incentives to contribute to dependencies? If it's being used a lot, it should be getting more fixes.
Yes, of course because that's how the majority of people use open source. They use it and don't contribute to it. The people who do contribute to it don't see the problem and the people using it...
The problem seems to be a lack of incentives to contribute to dependencies?
Yes, of course because that's how the majority of people use open source. They use it and don't contribute to it. The people who do contribute to it don't see the problem and the people using it don't contribute.
One thing I noticed while dabbling with Rust was that if you started relying on different libraries for similiar things (to cover that 20% missing use case), you'd start having massive library...
One thing I noticed while dabbling with Rust was that if you started relying on different libraries for similiar things (to cover that 20% missing use case), you'd start having massive library overlap with different versions because the various other libraries didn't update their dependencies.
Not sure there is an easy way to solve this short of having a good curation system.
On the bright side, if someone fixed the library then the bug would be fixed for everything downstream of it. This wouldn't be true if everyone rolled their own.
The problem seems to be a lack of incentives to contribute to dependencies? If it's being used a lot, it should be getting more fixes.
Yes, of course because that's how the majority of people use open source. They use it and don't contribute to it. The people who do contribute to it don't see the problem and the people using it don't contribute.
One thing I noticed while dabbling with Rust was that if you started relying on different libraries for similiar things (to cover that 20% missing use case), you'd start having massive library overlap with different versions because the various other libraries didn't update their dependencies.
Not sure there is an easy way to solve this short of having a good curation system.