> on some 50K lines of code
replyalso some 3rd party libraries are overdesigned/overcomplicated because everybody wants the library to do everything for everybody.
This overcomplication can easily introduce security problems that is not present in the 1K solution.
> overdesigned/overcomplicated because everybody wants the library to do everything for everybody.
replyAlso a source of significant dependency churn even excluding security bugs.
Whereas with my own code I don't have to worry about scheduling work that's only arisen because somebody outside my organisation has decided to make a breaking change in a dependency. Paying that tax got old over a decade ago, and my patience with it now is close to zero.
100% our thinking too.
replycough OpenSSL cough
reply[dead]
reply