Hacker News Reader

I've been skimming the arguments so I might have missed something big, but isn't the key distinction that Deno can take anything from a URL? Go's "go get" is backed by version control systems, but you could freely point your deno at "http://dangerous.com/evil.ts". I thought the concern was about the potentially problematic flexibility.

View on HN

Isn't that the advantage though, that you can do exactly that without concern.

> deno run --allow-write=~/only-evil-here http://dangerous.com/evil.ts

Go has a system for telling where to fetch based on the URL response. You can basically send anything if you are evil, but Go modules keep a hash of seen content (what Deno calls a lockfile), so you’d notice that it changed.

Reply on news.ycombinator.com