Conversation

I bought a HTML template for a site I'm making. Typically I just pull the compiled html files out and make a standalone project which I maintain in a text editor. But, this time I figured it's time to learn modern web development so I tried using the toolchain it came with.

The toolchain consists of 3,446 dependencies, runs 15 processes, and uses 3 GB of ram. Unfortunately I can't run for president, but if I could I would run on the platform of making Node.js illegal.

9
16
0
@malwaretech I just vented in the office about a stupid piece of client-side JS with zero dependencies, distributed as an npm module, so you either cut the damn boilerplate manually or download and execute several physical libraries worth of code to run 50 lines of the implementation you actually want.
0
0
3

@malwaretech

They got a node.js mastodon also I saw recently! 🐘.js

Citation:
https://infosec.exchange/@shanmukhateja@social.linux.pizza/113222211207941701

0
0
0

@malwaretech I had a vendor give us instructions on how to deploy a product from a Github repo once. It was a Node.js app. I spent a day or two learning Docker so that I could put it in a container and not have it completely shit on our system.

And, of course, it was an old, out of date version of Node.js that was required.

0
0
0

@malwaretech Yeah I had the same experience using Node to do React stuff. I spent 6 months with it, hated it for exactly that reason, understood all at once why we have toolchain vulns, and then ditched it (was going to see if I wanted to write a phone app in React native- Narrator: "he didn't").

I actually returned to Kotlin as my safety position (!), which blew my mind, since I was fleeing Java/Kotlin because "too bloated man".

0
0
0

@malwaretech Unfortunately, I can't vote for US presidents, either - but if I could, I'd totally vote for that.

0
0
0

@Ezhik @malwaretech What’s so funny is that “modern” web development is now looping back around to server-side code, but somehow worse because it’s all still JavaScript.

As a recovering Node developer, I would endorse this campaign at the federally allowed maximum.

0
1
0

@malwaretech

You had me at 3,446 dependencies.

I immediately knew it was NodeJS and did not have to read more, but I did just for the confirmation.

0
0
0

@polarized @malwaretech and you could finally sleep without nightmares!

0
0
0