Dependencies are a huge supply chain security risk; the more of them you have, and the more often you update, the bigger the attack surface.
  • FizzyOrange@programming.dev
    3·
    19 days ago

    I haven’t used Java for decades and never used .net so I’ll take your word for those. Absolutely not for C++ though.

    Go’s standard library has:

    • JSON, XML, etc.
    • A web client and server
    • Bigints
    • Logging
    • JPEG, PNG and GIF
    • SQL client
    • SSH client
    • All the crypto algorithms
    • Gzip, zlib, deflate, etc.

    C++ has none of that. Hell C++ only got a function to check if a string starts with a prefix a few years ago.