←back to thread

295 points todsacerdoti | 1 comments | | HN request time: 0s | source
Show context
BrenBarn ◴[] No.45948369[source]
> Sure, you could use blob-util, but then you’d be taking on an extra dependency, with unknown performance, maintenance, and supply-chain risks.

Use of an AI to write your code is also a form of dependency. When the LLM spits out code and you just dump it in your project with limited vetting, that's not really that different from vendoring a dependency. It has a different set of risks, but it still has risks.

replies(4): >>45948517 #>>45948587 #>>45948702 #>>45949430 #
1. danelski ◴[] No.45949430[source]
Wouldn't call it a risk in itself, but part of the benefit of using a library, a good and tailored one at least, is that it'll get modernised without my intervention. Even if the code produced for you was state-of-the-art at the moment of inclusion, will it remain that way 5 years from now?