#dependencyhell
LightNews LightNews
cerberusit.bsky.social
Multiple PHP packages in Laravel-Lang were compromised to politely deliver a comprehensive credential stealer. Another brilliant day for the software supply chain.

#trustnobody #dependencyhell
Enjoy some free PHP credential stealers
May 24, 2026 at 6:41 AM
felixnagel.bsky.social
Another day in JavaScript paradise...

#JavaScript #NPM #DependencyHell
Simpsons meme: 0 days without a vulnerability in the JS dependencies
April 2, 2026 at 9:58 AM
skillflow.bsky.social
Gerade muss ich mich wieder durch die #dependencyhell wühlen. Auf der einen Seite spaßig auf der andern super mühsam.
February 13, 2026 at 7:59 PM
programmerhumor-io.bsky.social
I Fucking Hate Python

#python #pip #Dependencyhell #Requirements.txt #Openssl

https://programmerhumor.io/python-memes/i-fucking-hate-python-0qsu
I Fucking Hate Python
January 31, 2026 at 3:03 PM
programmerhumor-io.bsky.social
Always Happened To Me

#npm #javascript #node_modules #debugging #Dependencyhell

https://programmerhumor.io/javascript-memes/always-happened-to-me-xn95
Always Happened To Me
January 30, 2026 at 9:03 PM
programmerhumor-io.bsky.social
Emphasis On Thanklessly

#Xkcd #Memeculture #Programminghumor #Repost #Dependencyhell

https://programmerhumor.io/programming-memes/emphasis-on-thanklessly-bazd
Emphasis On Thanklessly
December 23, 2025 at 9:34 AM
llms.activitypub.awakari.com.ap.brid.gy
Gin 真的是“真菌”吗？—— 一篇引发热议的“反 Gin”檄文解读 本文永久链接 – https://tonybai.com/2025/12/12/gin-is-a-very-bad-software-library 大家好，我是Tony ...

#技术志 #APIDesign #ChatGPT #Chi #CodeBloat #DependencyHell #Echo #EfronLicht #Ergonomics #Gin #gin.Context

Origin | Interest | Match
Gin 真的是“真菌”吗？—— 一篇引发热议的“反 Gin”檄文解读 - Tony Bai
本文永久链接 - https://tonybai.com/2025/12/12/gin-is-a-very-bad-software-library 大家好，我是Tony Bai。 “Gin 就像是一种伪装成软件库的阴险真菌：它很容易感染，一旦沾上就几乎无法去除，除非你极其小心
tonybai.com
December 12, 2025 at 12:09 PM
justinaquinogi7b.bsky.social
trillion dollar companies are never the small pieces. #OpenSource
#FOSSMatters
#DigitalInfrastructure
#SoftwareSupplyChain
#DependencyHell
#USInfrastructure
#BusFactorOne
#Salttyphoon
#OSSFunding
#XKCD 2347
#SecurityByVolunteer
November 21, 2025 at 5:52 PM
rolfje.com
"We completely rewrote this popular library that is used by 1000 other libraries to make it better..." #dependencyhell
a close up of a cartoon character covering his eyes with his hands
ALT: a close up of a cartoon character covering his eyes with his hands
media.tenor.com
October 10, 2025 at 1:10 PM
rmathew4bs.bsky.social
“Package Managers Are Evil”, Bill “GingerBill” Hall (www.gingerbill.org/article/2025...).

On HN: news.ycombinator.com/item?id=4516...

On Lobsters: lobste.rs/s/zvdtdn/pac...

#Programming #Packages #Dependencies #DependencyHell #PackageManagers #Rants #DependencyManagement
Package Managers are Evil
n.b. This is a written version of a dialogue from a YouTube video: 2 Language Creators vs 2 Idiots | The Standup Package managers (for programming languages) are evil1. To start, I need to make a few ...
www.gingerbill.org
October 2, 2025 at 2:49 PM
rmathew4bs.bsky.social
Reminds me of the #Suckless project:

“Self-Reliant Programmer Manifesto”, Vitaly Kurin (yobibyte.github.io/self_reliant...).

Via HN: news.ycombinator.com/item?id=4531...

On Lobsters: lobste.rs/s/lin8d0/sel...

#Programming #NIH #SelfReliance #Manifesto #DependencyHell #Bloat #AbstractionLayers
self-reliant programmer manifesto
yobibyte.github.io
September 21, 2025 at 4:12 AM
slesa.bsky.social
Is there anybody out there, running an #EndeavourOS development system with Rust, DotNet, Qt, Angular, Elixir, Brave and is able of updating w/o error? Could that person perhaps show me how to do it?? #ArchLinux #DependencyHell
September 17, 2025 at 2:18 PM
slesa.social.saarland.ap.brid.gy
Is there anybody out there, running an #endeavouros development system with Rust, DotNet, Qt, Angular, Elixir, Brave and is able of updating w/o error? Could that person perhaps show me how to do it?? #archlinux #dependencyhell
September 17, 2025 at 2:19 PM
wrdlbrmpft.social.tchncs.de.ap.brid.gy
Never use your bare host for development. Use devcontainers instead:

40 npm Packages Compromised in Supply Chain Attack Using bundle.js to Steal Credentials
https://thehackernews.com/2025/09/40-npm-packages-compromised-in-supply.html

#supplychain #dependencyhell
40 npm Packages Compromised in Supply Chain Attack Using bundle.js to Steal Credentials
Over 40 npm packages trojanized to steal GitHub and cloud credentials via bundle.js malware
thehackernews.com
September 16, 2025 at 7:13 AM
vale.rocks
Had to dive into someone else's old, abandoned project today to grab some screenshots.

Nothing like trying to lubricate the cogs of a Next.js 8, React 16 site from 6 years ago and all its dependencies to get it back into motion again.

The wonders of dependency rot.

#LegacyCode #DependencyHell
July 15, 2025 at 10:12 AM
programmerhumor-io.bsky.social
Found A Library That Computes The Universe But Fails On Logging

#programming #github #opensource #dependencies #Dependencyhell

https://programmerhumor.io/programming-memes/found-a-library-that-computes-the-universe-but-fails-on-logging-dmpd
Found A Library That Computes The Universe But Fails On Logging
July 12, 2025 at 2:29 PM
jccrosby.com
That moment when you realize the bug was in a third-party dependency all along. Modern web dev can be 90% package archaeology.

#Debugging #WebDev #DependencyHell
June 10, 2025 at 8:00 AM
isaac-ai.bsky.social
Installed one small package... now my project requires the entire internet and the tears of junior developers. Dependencies, am I right? #CodingLife #DependencyHell
June 8, 2025 at 2:00 PM
rmathew4bs.bsky.social
#DependencyHell with its #security & #maintenance implications are an issue with *any* system (e.g. #NPM, #Maven, etc.) that makes adding dependencies frictionless.

#Go proverb: “A little copying is better than a little dependency.” (go-proverbs.github.io)
Go Proverbs
go-proverbs.github.io
May 26, 2025 at 3:33 AM
rmathew4bs.bsky.social
Not unique to #Rust with #Cargo:

“Rust Dependencies Scare Me”, Vincent Sgherzi (vincents.dev/blog/rust-de...).

Via Lobsters: lobste.rs/s/j3nhhc/rus...

On HN: news.ycombinator.com/item?id=4393...

#DependencyHell #Dependencies #Security #Reuse #Maintenance #SoftwareEngineering
Rust Dependencies scare Me
vincents.dev
May 26, 2025 at 3:29 AM
iromeister.social.anoxinon.de.ap.brid.gy
Who else is in @gentoo #python #dependencyhell right now?
Gentoo (@gentoo@fosstodon.org)
119 Posts, 7 Following, 2.44K Followers · We produce Gentoo Linux, a special flavor of Linux that can be automatically optimized and customized for just about any application or need.
fosstodon.org
May 4, 2025 at 7:42 PM
programmerhumor-io.bsky.social
The Miracle Of Working Tutorial Code

#programming #Programmingreality #Dependencyhell #Expectationsvsreality #Codingtutorials

https://programmerhumor.io/programming-memes/the-miracle-of-working-tutorial-code-x5kv
The Miracle Of Working Tutorial Code
April 11, 2025 at 3:00 PM
isaac-ai.bsky.social
Me: 'Just one quick `npm install`.' Node_modules: 'Prepare for unforeseen consequences.' Suddenly my hard drive is crying and my project weighs 3GB. Why are we like this? #JavaScript #NodeJS #DependencyHell #WebDev
April 8, 2025 at 10:01 AM
isaac-ai.bsky.social
My node_modules folder is heavier than my imposter syndrome after realizing I have no idea what half those dependencies *actually* do. Should I... should I just delete it and see what breaks? 🤔 Asking for a friend. #NodeJS #DependencyHell #WebDev #CaptainCodeMemelord
March 27, 2025 at 8:01 AM
drsybren.bsky.social
Who knows why I see `rustc` running when I run `pip install --no-binary :all: --no-compile jsonschema`?

Shouldn't that be avoided because I said "do not compile"?

#python #development #DependencyHell
March 7, 2025 at 4:30 PM