9 comments

[ 4.3 ms ] story [ 23.3 ms ] thread
A big chunk of those are only used during development and compilation (like `6to5` and `Babel` and all the `@types` libs). They are not (or at least should not be) included in the final, downloadable product.
I wonder what the dependency tree looks like.

Flattened like this, it looks ridiculously redundant-- why are there 7 different implementations of extend?

Most likely one of the dependencies required a certain version and did not include the caret (certain version or higher), and another dependency did the same thing with a different version, and so on.
Two thousand opportunities for a plausibly deniable backdoor
Never attribute to malice what you can attribute to incompetence.
but don't exclude malice!
They definitely are not prone to not-invented-here syndrome.
Slack is trash - for this and many other reasons. Social media and engineered engagement has no reason to be in the workplace. They're profiting from dark patterns.
Left Slack a long time ago (and took my eight hundred employees with me).