Earlier quoted context omitted.
> If there is a well written, well tested, and widely used micro-library out there that does one thing and does it very well, why not use it? Because every dependency comes with a cost. First of all, it needs to be available and the author might decide to pull it - maybe not from npm, but from github. Second is a matter of trust: Someone just needs to take over the left-pad authors npm account an all of a sudden he c…
I still maintain that those problems can be solved with better tooling and package management rather than "bundling" dependencies. Bundling to me is such a sledgehammer solution. Yeah, it can somewhat prevent many of those issues, but it also comes at a pretty large cost. * it leads to code duplication * it can ruin the performance of tree-shaking and minification systems * it prevents you from swapping out a small m…
Neither did I deny that inlining everything comes at a cost as well, so the goal is to find a good point on the scale. I was just pointing out that having tons of small dependencies is not free of cost.