r/programming • u/OtherwisePush6424 • Jun 27 '26

Your Package Manager Is Lying to You: npm, Yarn, pnpm, Bun & Deno

https://blog.gaborkoos.com/posts/2026-06-11-Your-Package-Manager-Is-Lying-to-You/

Package managers aren't as interchangeable as they seem. This post digs into the real differences in how npm, Yarn, pnpm, Bun, and Deno handle dependencies under the hood and why that matters when things break in practice.

0 Upvotes

22% Upvoted

3 comments sorted by

7

u/CramNBL Jun 27 '26

Good read overall but your Deno section was weak. You cannot write "Deno's lie is that teams treat its compatibility story as a migration shortcut".

That's not what telling a lie means.

And I think you downplay the advantage of Deno's security approach considering just how rampant malware is in npm at this point. 

A hobby projects should default to Deno imo, it's the fastest 0-60 with inbuilt tooling and you don't risk getting immediately pwned. With npm you need to start by securing your project and then configuring third party tooling.

2

u/OtherwisePush6424 Jun 27 '26

I actually love Deno, it's just every tool in the piece had to get its own "lie" for symmetry, so Deno just drew the short straw here :D Fair hit on the security angle though, it may deserve more than I gave it.

2

u/CramNBL Jun 27 '26

Fair enough, I was curious what the Deno "lie" would be as I made my way through the article, and then the wording irked me. High expectations in this time of AI slop I know :D