Dependencies are a huge supply chain security risk; the more of them you have, and the more often you update, the bigger the attack surface.
  • GiorgioPerlasca@lemmy.ml
    4·
    9 days ago

    Java, .net and C++ have standard libraries that are much bigger and much more battle tested than the one of Go.

    • FizzyOrange@programming.dev
      2·
      9 days ago

      I haven’t used Java for decades and never used .net so I’ll take your word for those. Absolutely not for C++ though.

      Go’s standard library has:

      • JSON, XML, etc.
      • A web client and server
      • Bigints
      • Logging
      • JPEG, PNG and GIF
      • SQL client
      • SSH client
      • All the crypto algorithms
      • Gzip, zlib, deflate, etc.

      C++ has none of that. Hell C++ only got a function to check if a string starts with a prefix a few years ago.