Okay so fishing for opinions: Automatic dependency resolution should stop once you switch providers. Concrete example: guava depends on a small "internal" module. So if you were to declare both in your dependency manifest it would look like
<provider name="google.com">
<module name="com.google.common" version=".." />
<module name="com.google.common.util.concurrent.internal" version=".." />
</provider>
And that is genuinely not worth people's time to declare. So you should be able to say "I want com.google.common " and get that for free.
<provider name="google.com">
<module name="com.google.common" version=".." />
</provider>
But if you add a dependency that depends on a library that they are not the author of, they should have to explicitly list both providers.
<provider name="example.com">
<module name="demo.lib" version=".." />
</provider>
<provider name="vavr.io">
<module name="io.vavr" version=".." />
</provider>
So in the example above, assume demo.lib depends on io.vavr. You don't get that unless you explicitly list the provider for that module. (you can get an error or a suggestion, but you dont get it for free). You can get io.vavr.match automatically because it doesn't cross a provider boundary though.
This way you have to directly interrogate your left-pads. Its not just "I have N deps" its "I depend on N people/orgs"Seems about right. Trust usually isn't invested in a piece of code but the people and organization behind it
This seems at the same time a sane default and a nightmare to maintain
cool passage shared from #C082PRKPT
It took him a long time to come around to saying anything nice about lisp, https://kazimirmajorinc.com/Documents/Edsger-W-Dijkstra-on-Lisp/index.html
it seems that docs had a hand in slowing things down for him? > (I am afraid that tolerance of inadequate texts was not my leading characteristic).
I was just made aware of https://httpwg.org/http-extensions/draft-ietf-httpbis-safe-method-w-body.html -- seems like a good idea but I imagine this will cause a lot of churn in web stack libraries and frameworks...
I already use http methods i totally made up
i consider it a challenge
All C# asp net apps:
sed/POST/QUERY/g π
(ok, it won't work this way but they rely on POST for everything, from what I remember)