The fate of "small" open source

> the era of small, low-value libraries like blob-util is over.

Thankfully (not against blob-util specifically because I've never intentionally used it), I wouldn't completely blame llms either since languages like Go never had this dependency hell.

npm is a security nightmare not just because of npm the package manager, because the culture of the language rewards behavior such as "left-pad".

Instead of writing endless utilities for other project to re-use, write actual working things instead - that's where the value/fun is.

But as Go puts it:

“A little copying is better than a little dependency.”

https://go-proverbs.github.io/

Copying is just as much dependency, you just have to do maintenance through manual find-and-replace now.