Skip to content
  • Categories
  • Recent
  • Tags
  • All Topics
  • Popular
  • World
  • Users
  • Groups
Skins
  • Light
  • Brite
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (No Skin)
  • No Skin
Collapse
Caint logo. It's just text.
  1. Home
  2. Uncategorized
  3. What I want to know is why on earth there are 371,410,000 weekly downloads of ansi-styles????
Welcome to Caint!

Issues? Post in Comments & Feedback
You can now view, reply, and favourite posts from the Fediverse. You can click here or click on the on the navigation bar on the left.

What I want to know is why on earth there are 371,410,000 weekly downloads of ansi-styles????

Scheduled Pinned Locked Moved Uncategorized
7 Posts 6 Posters 0 Views
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • Tropical Storm JerryπŸŒ€J This user is from outside of this forum
    Tropical Storm JerryπŸŒ€J This user is from outside of this forum
    Tropical Storm JerryπŸŒ€
    wrote last edited by
    #1

    What I want to know is why on earth there are 371,410,000 weekly downloads of ansi-styles????
    https://www.bleepingcomputer.com/news/security/hackers-hijack-npm-packages-with-2-billion-weekly-downloads-in-supply-chain-attack/

    Royce WilliamsT 1 Reply Last reply
    0
    • Tropical Storm JerryπŸŒ€J Tropical Storm JerryπŸŒ€

      What I want to know is why on earth there are 371,410,000 weekly downloads of ansi-styles????
      https://www.bleepingcomputer.com/news/security/hackers-hijack-npm-packages-with-2-billion-weekly-downloads-in-supply-chain-attack/

      Royce WilliamsT This user is from outside of this forum
      Royce WilliamsT This user is from outside of this forum
      Royce Williams
      wrote last edited by
      #2

      @jerry Because "destroy the entire container and rebuild it from scratch every time you change a line of code anywhere in the stack" is the new normal.

      [Edit: to be clear, I'm saying that with relative neutrality; there are trade-offs!]

      hrbrmstr πŸ‡ΊπŸ‡¦ πŸ‡¬πŸ‡± πŸ‡¨πŸ‡¦ πŸ³οΈβ€πŸŒˆH 1 Reply Last reply
      0
      • Royce WilliamsT Royce Williams

        @jerry Because "destroy the entire container and rebuild it from scratch every time you change a line of code anywhere in the stack" is the new normal.

        [Edit: to be clear, I'm saying that with relative neutrality; there are trade-offs!]

        hrbrmstr πŸ‡ΊπŸ‡¦ πŸ‡¬πŸ‡± πŸ‡¨πŸ‡¦ πŸ³οΈβ€πŸŒˆH This user is from outside of this forum
        hrbrmstr πŸ‡ΊπŸ‡¦ πŸ‡¬πŸ‡± πŸ‡¨πŸ‡¦ πŸ³οΈβ€πŸŒˆH This user is from outside of this forum
        hrbrmstr πŸ‡ΊπŸ‡¦ πŸ‡¬πŸ‡± πŸ‡¨πŸ‡¦ πŸ³οΈβ€πŸŒˆ
        wrote last edited by
        #3

        @tychotithonus @jerry Gosh I hate this practice so much. What a waste of compute, storage, bandwidth, and time.

        Dave Wilburn :donor:D 1 Reply Last reply
        0
        • hrbrmstr πŸ‡ΊπŸ‡¦ πŸ‡¬πŸ‡± πŸ‡¨πŸ‡¦ πŸ³οΈβ€πŸŒˆH hrbrmstr πŸ‡ΊπŸ‡¦ πŸ‡¬πŸ‡± πŸ‡¨πŸ‡¦ πŸ³οΈβ€πŸŒˆ

          @tychotithonus @jerry Gosh I hate this practice so much. What a waste of compute, storage, bandwidth, and time.

          Dave Wilburn :donor:D This user is from outside of this forum
          Dave Wilburn :donor:D This user is from outside of this forum
          Dave Wilburn :donor:
          wrote last edited by
          #4

          @hrbrmstr @tychotithonus @jerry I'll admit that my experience with container tech isn't super deep, but don't most container systems heavily cache for exactly this reason? Granted, there are plenty of situations where the cache gets invalidated, like changes up near the top of Docker files IIRC.

          Taggart :donor:M 1 Reply Last reply
          0
          • Dave Wilburn :donor:D Dave Wilburn :donor:

            @hrbrmstr @tychotithonus @jerry I'll admit that my experience with container tech isn't super deep, but don't most container systems heavily cache for exactly this reason? Granted, there are plenty of situations where the cache gets invalidated, like changes up near the top of Docker files IIRC.

            Taggart :donor:M This user is from outside of this forum
            Taggart :donor:M This user is from outside of this forum
            Taggart :donor:
            wrote last edited by
            #5

            @DaveMWilburn @hrbrmstr @tychotithonus @jerry Both things are true! Yes, image builds will cache what they can. However, especially in the case of node apps, it is not uncommon for the npm install component to be toward the end of the build pipeline, post other changes that might be made. Or even as an entrypoint for the container!

            Gabriel NG 1 Reply Last reply
            0
            • Taggart :donor:M Taggart :donor:

              @DaveMWilburn @hrbrmstr @tychotithonus @jerry Both things are true! Yes, image builds will cache what they can. However, especially in the case of node apps, it is not uncommon for the npm install component to be toward the end of the build pipeline, post other changes that might be made. Or even as an entrypoint for the container!

              Gabriel NG This user is from outside of this forum
              Gabriel NG This user is from outside of this forum
              Gabriel N
              wrote last edited by
              #6

              @mttaggart @DaveMWilburn @hrbrmstr @tychotithonus @jerry yeah, compute/bandwidth is cheap vs the time of a developer at least short term so that's what we get

              Even if there was some caching opportunity, proper caching is hard so easier not to do it.

              When computers were more expensive, the optimisation went in the other direction, better throw man-hours on it to save a bit of compute or bandwidth.

              It's kind of obvious but I did not really realise it before watching the new Python documentary.

              https://infosec.exchange/@gnyman/115133703587699083

              But still I wonder if the people who grew up with unlimited bandwidth and computer think about it, or is it just the ones who grew up with "scarcity" who are irked by it.

              Sorry for hijacking the thread for ranting πŸ™‚

              Dave Wilburn :donor:D 1 Reply Last reply
              0
              • Gabriel NG Gabriel N

                @mttaggart @DaveMWilburn @hrbrmstr @tychotithonus @jerry yeah, compute/bandwidth is cheap vs the time of a developer at least short term so that's what we get

                Even if there was some caching opportunity, proper caching is hard so easier not to do it.

                When computers were more expensive, the optimisation went in the other direction, better throw man-hours on it to save a bit of compute or bandwidth.

                It's kind of obvious but I did not really realise it before watching the new Python documentary.

                https://infosec.exchange/@gnyman/115133703587699083

                But still I wonder if the people who grew up with unlimited bandwidth and computer think about it, or is it just the ones who grew up with "scarcity" who are irked by it.

                Sorry for hijacking the thread for ranting πŸ™‚

                Dave Wilburn :donor:D This user is from outside of this forum
                Dave Wilburn :donor:D This user is from outside of this forum
                Dave Wilburn :donor:
                wrote last edited by
                #7

                @gnyman @mttaggart @hrbrmstr @tychotithonus @jerry

                While you're right, these labor saving practices are externalizing a lot of costs the others get burdened with. I'm surprised the companies hosting these software repos continue to bear the hosting costs for free, and I worry about the potential for enshittification if those companies end up in hard times and can't justify hosting stuff for free anymore. What happens if Microsoft's big bets on GenAI fail, their projected revenue tanks, and they start looking at GitHub and NPM as unjustifiable costs (exacerbated by lazy software build practices) that they either need to tap for revenue or shed?

                1 Reply Last reply
                1
                0
                • R AodeRelay shared this topic
                Reply
                • Reply as topic
                Log in to reply
                • Oldest to Newest
                • Newest to Oldest
                • Most Votes


                • Login

                • Don't have an account? Register

                • Login or register to search.
                • First post
                  Last post
                0
                • Categories
                • Recent
                • Tags
                • All Topics
                • Popular
                • World
                • Users
                • Groups