22:07 <kentonv> npm audit be like... "You depend on 15 different libraries that in turn depend on shitlib v0.0.2. A vulnerability has been reported in shitlib, which is patched in v6.23.19. Update?"

22:23 <JacobWeisz[m]> Packages confuse me. I honestly don't know how everything Node based hasn't come crashing down like a giant house of cards yet.

22:24 <JacobWeisz[m]> kentonv: Did you see the grain settings PR? It would be ideal to get your thoughts since it's a major UI thing.

22:30 <isd> Eh, language package managers aren't really the source of the issue, though they perhaps exacerbate it. The sheer amount of code that's running on any given machine is mind-boggling, even just stuff that's written in languages (C & C++) that don't have real package managers.

22:30 <kentonv> the grain settings thing looks neat. I don't think I have any particular opinions about it though.