The Dangers of Using Code You Don't Control

package-management.markdown

The Dangers of Using Code You Don't Control

The Events

What happened

The Drama

The Developer's Take

Kik's Side of Things

NPM's Take

The Reaction Blog Post With Some Good Points And An Aggressive Title Published After Any Major Tech Event

What Are We Even Talking About

What is NPM

A Tutorial on Using NPM

---

Checks for Understanding

Fork this Gist and Respond to the Following Questions

• In broad strokes, summarize the event
• How do NPM and RubyGems relate?
• What is left-pad and why is it used?

Observing

• Go through some past projects you've worked on and look through the gemfiles.
• Pick three gems - try to pick a combination of obscure gems and ones you use on every project
• List them with links to their Github repos here
  • Gem 1
  • Gem 2
  • Gem 3
• For each Gem, answer the following questions
  • What does this Gem generally do?
  • When is the date of the last commit?
  • How many open issues does it have?
  • Start looking around the source code
    • Link to one piece of code or a file you understand
      • What does this code do?
    • Link to one piece of code or a file you don't understand at all?
      • What do you think this code might do?
  • Does it seem reasonable to add this dependency into your code?
• What are some factors you consider when adding dependencies to your projects?

Challenge Level Understanding (OPTIONAL but cool)

Building

• Read through these two walkthroughs
  • A Walk Through to Create an NPM module
  • A Walk Through to Create a Ruby Gem
• Create your own npm package or ruby gem that does something silly. Some examples:
  • Pat Wey's We Work Remotely Gem
  • My Curl-Breaker NPM package - made as part of an engineering lunch hackathon... judge my terrible code. JUDGE IT.
• Link to your work below

My spoon: https://gist.github.com/ShannonPaige/e85752507cf2e732a486

My spork (with a gem!): https://gist.github.com/SteveOscar/143a6f27d71d517b2bea

My Eating Utensil: https://gist.github.com/stevepentler/6ea1dae488122136b6fa
Check out the pry documentation I discovered!

WHO NEEDS UTENSILS. https://gist.github.com/martensonbj/915ffe6b2e3d23623fe5

Everything can be eaten with a spoon. https://gist.github.com/brantwellman/c88de44810960c114326

@stevepentler - I'm legit dying reading the overview/pry quotes

@SteveOscar - sweet gem!!!

@rrgayhart - thanks! works fine locally, still struggling to make it work from rubygems. So fun.

https://gist.github.com/bethsecor/d04e96fc5e994e6e5bfd