Your App Depends on 1,000 Strangers
Modern apps can depend on hundreds - or thousands - of packages you did not choose directly. I compare Python, JavaScript, Go and Sky to show why dependency management becomes a supply-chain, build and deployment problem.
Python has moved through pip, pipenv, Poetry and uv. JavaScript has npm, Yarn, pnpm and Bun - plus a vast transitive dependency tree. Go's module system is one of the strongest mainstream approaches, but private repositories and replace directives still create friction. Sky tests a deliberately narrow alternative: one manifest, one lockfile and a single compiled binary with no production-time dependency resolution.
Chapters:
0:00 Cold open - the setup ritual every backend has
1:00 Python - pip, pipenv, poetry, uv
2:35 JavaScript - npm, yarn, pnpm, bun
4:11 Go - good, but the corners are still sharp
5:18 Sky - sky.toml + four commands
6:14 Single-binary deploy - no runtime deps
6:31 Borrow good ideas. Reject the many-ways trap.
7:26 What I actually want from a dependency manager
7:57 Outro - next Saturday: auth weekend
Watch next - The Error Handling Problem That Followed Me Everywhere:
• The Error Handling Problem That Followed M...
Sky is open source:
https://github.com/anzellai/sky
#Dependencies #SoftwareEngineering #SkyLang