Message from JavaScript discussions
November 2017
— ?
Since when did non-determinism enter the stage? Optional modules? That's waay different than what I'm talking about
— Okay
— Yes, that still makes it a dependency
— What's your point?
— It can reduce both size and dependency
— For the sake of this discussion, vulnerability == dependency
— In an hour I can write up a comprehensive example
— Module systems are imho overkill for most web sites. Oh and webapps that take minutes to load are shit anyways, regardless of whether they use a module system or not. Imo module systems are just convenient, not more and not less
— I'm not saying it will be less code
— I'm just saying that NOT using a module system (until imports are finalized) in browsers is a vulnerability
— For instance:
script1.js:var i = 4;
script2.js:
var arr = [];
arr.length = i;
i
is a dependency of script2.js