Zero-dependency streaming tar parser and writer for JavaScript

A tiny file tool just sparked a huge "delete your bloat" party

TLDR: [modern-tar](https://github.com/ayuhito/modern-tar) is a new file-archiving tool for JavaScript that promises speed, safety, and no extra package baggage. The community split instantly between cheering a cleaner, safer ecosystem and mocking the growing obsession with “zero dependencies” as developer status theater.

A small new JavaScript project called modern-tar should be a sleepy developer release: it reads and writes TAR archives, the old bundle format used to pack files together. Instead, it detonated one of the internet’s favorite arguments: why does every tiny tool seem to drag in a mountain of extra code? The project’s big flex is simple enough for non-coders to get: it does the job with zero extra packages, while promising speed, browser support, and fewer security headaches.

That was enough to send the comments into full-on culture-war mode. One side treated it like a heroic cleanup mission, cheering the broader e18e.dev movement and basically yelling, “Finally, somebody brought a broom to npm.” Fans loved the anti-bloat message, the “works in more places” angle, and the idea that fewer moving parts means fewer opportunities for something shady to sneak into your app.

But skeptics were not about to let the victory lap happen quietly. The hottest pushback? Zero dependencies is not a religion. Some commenters rolled their eyes at what they saw as purity politics, joking that developers now collect dependency-free badges like fitness trackers count steps. Others asked the practical question: great, but will anyone switch if the old tools already work?

The humor was peak programmer internet. People compared dependency trees to cursed family trees, called bloated packages “matryoshka dolls of regret,” and joked that JavaScript developers will rebuild the entire operating system just to avoid installing one more package. In other words: a humble archive library became a referendum on modern coding habits, and the crowd absolutely made it a show

Key Points

  • The article introduces modern-tar as a zero-dependency, streaming TAR parser and writer for JavaScript.
  • modern-tar separates its core parsing engine from I/O, using a synchronous state machine that processes Uint8Array chunks.
  • The library is designed to work across multiple runtimes, including browsers via the Web Streams API and Node.js via the Writable API.
  • It uses a zero-copy ring buffer to reduce buffer reallocations, memory fragmentation, and garbage collection overhead during parsing.
  • For extraction and packing, the library uses promise-chain path caching to preserve correct directory ordering and mitigate TOCTOU-style race conditions while allowing parallelism.

Hottest takes

"Somebody finally brought a broom to npm" — @buildminimal
"Zero dependencies is not a personality trait" — @skeptic42
"JS devs will rewrite the universe to avoid one package install" — @bytebard
Made with <3 by @siedrix and @shesho from CDMX. Powered by Forge&Hive.