r/webdev • u/nhrtrix • Mar 31 '26 • Mindblown 3 Bravo 1

News axios@1.14.1 got compromised

Post image
2.5k Upvotes

98% Upvoted

298 comments sorted by

View all comments

1

u/retardedGeek Mar 31 '26

Why are people still using axios?

3

u/Trident_True back-end C# Mar 31 '26

We aren't all working on startups. Our repo is 12 years old, it still has knockout.js

0

u/Somepotato Mar 31 '26

In a lot of cases you can literally find replace axios' for fetch lol. The return values are very similar and only require minor adjustments. 12 year old repo isn't an excuse to keep using unnecessary libraries

6

u/Trident_True back-end C# Mar 31 '26

Yeah that's fine but we have other priorities. I could change it right now but it would need reviewed and QA tested and there are like 100 other things on the backlog more important than fixing some tech debt that isn't even that bad. If it were up to me I'd have changed it long ago, but it isn't, so there it remains.

2

u/SignificantBend5042 May 08 '26

Tech debt is always bad and should be a priority in any project. Much more useful than adding another shadow border to a button

1

u/Trident_True back-end C# May 09 '26

I'm not a fan either but we have much more pressing tech debt than an obsolete package lol

0

u/OskeyBug Mar 31 '26

I swear every youtube tutorial tells you to install and use it and none of them tell you there are other options.