Dependencies are a huge supply chain security risk; the more of them you have, and the more often you update, the bigger the attack surface.
    • FizzyOrange@programming.dev
      1·
      8 hours ago

      I think the only mainstream language with a standard library that is both good and comprehensive is Go. All of the others either have smaller standard libraries (e.g. Rust) or poorly designed ones (Python).

      • GiorgioPerlasca@lemmy.ml
        1·
        3 hours ago

        Java, .net and C++ have standard libraries that are much bigger and much more battle tested than the one of Go.

        • FizzyOrange@programming.dev
          2·
          49 minutes ago

          I haven’t used Java for decades and never used .net so I’ll take your word for those. Absolutely not for C++ though.

          Go’s standard library has:

          • JSON, XML, etc.
          • A web client and server
          • Bigints
          • Logging
          • JPEG, PNG and GIF
          • SQL client
          • SSH client
          • All the crypto algorithms
          • Gzip, zlib, deflate, etc.

          C++ has none of that. Hell C++ only got a function to check if a string starts with a prefix a few years ago.