Title: At one end are single-function npm libraries that led to the left-pad fiasco[1].<p>At another end are things that you should only be implementing yourself in highly unusual circumstances, such as cryptography libraries.<p>Where on this spectrum do you usually implement the thing yourself, and what is your thought process?<p>What are the costs of importing a library, and how are those costs different for different projects? Are there security risks? What are the benefits?<p>Conversely, what are the costs and benefits of implementing something in-house?<p>Has there ever been a case where you&#x27;ve tried to roll your own and it ended in disaster? Or where you&#x27;d wished you&#x27;d never added a dependency on some library?<p>[1] https:&#x2F;&#x2F;www.theregister.co.uk&#x2F;2016&#x2F;03&#x2F;23&#x2F;npm_left_pad_chaos&#x2F;
Upvote: