The difference is that you have a single file to audit with npm. With Deno, any ...

flohofwoe · 2025-01-24T07:45:43 1737704743

Which isn't really a problem for simple one-file 'shell scripts'. For bigger projects, Deno already suggested to maintain all external imports in a central file.

iforgot22 · 2025-01-23T22:07:53 1737670073

That assumes someone is actually auditing the npm deps.

feross · 2025-01-24T03:52:24 1737690744

It’s trivial to audit your dependencies with https://socket.dev

Disclosure: I’m the founder.

iforgot22 · 2025-01-24T20:20:53 1737750053

Despite the ease of auditing services, there are notoriously a lot of devs using unaudited deps. Maybe they don't even think about it, unfortunately.