I bought a HTML template for a site I'm making. Typically I just pull the compiled html files out and make a standalone project which I maintain in a text editor. But, this time I figured it's time to learn modern web development so I tried using the toolchain it came with.
The toolchain consists of 3,446 dependencies, runs 15 processes, and uses 3 GB of ram. Unfortunately I can't run for president, but if I could I would run on the platform of making Node.js illegal.
They got a node.js mastodon also I saw recently! 🐘.js
Citation:
https://infosec.exchange/@shanmukhateja@social.linux.pizza/113222211207941701
@malwaretech I had a vendor give us instructions on how to deploy a product from a Github repo once. It was a Node.js app. I spent a day or two learning Docker so that I could put it in a container and not have it completely shit on our system.
And, of course, it was an old, out of date version of Node.js that was required.
@malwaretech Yeah I had the same experience using Node to do React stuff. I spent 6 months with it, hated it for exactly that reason, understood all at once why we have toolchain vulns, and then ditched it (was going to see if I wanted to write a phone app in React native- Narrator: "he didn't").
I actually returned to Kotlin as my safety position (!), which blew my mind, since I was fleeing Java/Kotlin because "too bloated man".
@malwaretech Unfortunately, I can't vote for US presidents, either - but if I could, I'd totally vote for that.
@Ezhik @malwaretech What’s so funny is that “modern” web development is now looping back around to server-side code, but somehow worse because it’s all still JavaScript.
As a recovering Node developer, I would endorse this campaign at the federally allowed maximum.
You had me at 3,446 dependencies.
I immediately knew it was NodeJS and did not have to read more, but I did just for the confirmation.
@polarized @malwaretech and you could finally sleep without nightmares!