"Vendoring" by Carson Gross
https://htmx.org/essays/vendoring/
"You get more of what you make easy, and if you make dependencies easy, you get more of them."
"This demonstrates significant cultural problem with dependency managers:
They tend to foster a culture of, well, dependency."
Similar arguments, with Rust examples, in:
"Build It Yourself", by Armin Ronacher
https://lucumr.pocoo.org/2025/1/24/build-it-yourself/
"... dependency churn. It's that never-ending treadmill of updates, patches, audits, and transitive dependencies that we as developers love to casually install in the name of productivity."
"But let's face it: corporate code review culture has also has infected Open Source software."
@khinsen Won't lie- I was low-key annoyed yesterday when my desire to generate a random number in Rust brought something like 17 dependencies into my project. WTF?!?
@khinsen Actually, "annoyed" isn't the proper word. It's more like "embarrassed." I'm embarrassed for myself for having to resort to using such a dependency. I'm also embarrassed for the devs of that package. I get it. Random numbers are trickier than they look. I've been around a long time and know about that. But 17 dependencies? To do what?!? Come on.
@dabeaz Would a C version be acceptable in your Rust project? There are high-quality single-C-file random number generators at
@khinsen Sure, but why can't there be a nice single-file Rust version? (Maybe there is, but I need to search harder).
This looks like a nice blog post about it. Apparently you can turn off default features of rand to shrink it down a lot already, didn't know that:
@khleedril @faassen @khinsen Agree. I'm not sure I'd follow much of anything from that blog post except to look a bit further into the `fastrand` crate. Maybe I'd call out to drand48 in C.
