off-topic

emccue 2026-06-26T15:07:11.399899Z

Okay so fishing for opinions: Automatic dependency resolution should stop once you switch providers. Concrete example: guava depends on a small "internal" module. So if you were to declare both in your dependency manifest it would look like

<provider name="google.com">
    <module name="com.google.common" version=".." />
    <module name="com.google.common.util.concurrent.internal" version=".." />
</provider>
And that is genuinely not worth people's time to declare. So you should be able to say "I want com.google.common " and get that for free.
<provider name="google.com">
    <module name="com.google.common" version=".." />
</provider>
But if you add a dependency that depends on a library that they are not the author of, they should have to explicitly list both providers.
<provider name="example.com">
    <module name="demo.lib" version=".." />
</provider>

<provider name="vavr.io">
    <module name="io.vavr" version=".." />
</provider>
So in the example above, assume demo.lib depends on io.vavr. You don't get that unless you explicitly list the provider for that module. (you can get an error or a suggestion, but you dont get it for free). You can get io.vavr.match automatically because it doesn't cross a provider boundary though. This way you have to directly interrogate your left-pads. Its not just "I have N deps" its "I depend on N people/orgs"

πŸ‘ 2
πŸ’œ 1
Ben Sless 2026-06-26T15:16:28.599679Z

Seems about right. Trust usually isn't invested in a piece of code but the people and organization behind it

mauricio.szabo 2026-06-29T22:43:44.495189Z

This seems at the same time a sane default and a nightmare to maintain

dpsutton 2026-06-26T17:29:17.455799Z

cool passage shared from #C082PRKPT

πŸ’‘ 2
πŸ™ 1
πŸ˜„ 1
phronmophobic 2026-06-26T17:38:51.930279Z

It took him a long time to come around to saying anything nice about lisp, https://kazimirmajorinc.com/Documents/Edsger-W-Dijkstra-on-Lisp/index.html

πŸ‘€ 1
πŸ™ 1
2026-06-28T01:41:57.692409Z

it seems that docs had a hand in slowing things down for him? > (I am afraid that tolerance of inadequate texts was not my leading characteristic).

seancorfield 2026-06-26T21:40:25.318929Z

I was just made aware of https://httpwg.org/http-extensions/draft-ietf-httpbis-safe-method-w-body.html -- seems like a good idea but I imagine this will cause a lot of churn in web stack libraries and frameworks...

emccue 2026-06-28T14:56:52.495249Z

I already use http methods i totally made up

emccue 2026-06-28T14:57:08.088819Z

i consider it a challenge

Martynas Maciulevičius 2026-06-27T07:18:38.090279Z

All C# asp net apps: sed/POST/QUERY/g πŸ˜„ (ok, it won't work this way but they rely on POST for everything, from what I remember)