4 ms·
With 700 dependencies, 200MB, and a massive security surface.
by renegade-otter 3y ago
With 700 dependencies, 200MB, and a massive security surface.
- mickael-kerjean 3y agothat's still better than CRA, to make the point a few weeks ago at work, I counted > 800 dependencies and 6 high security vulnerabilities warnings. If facebook can't get their shit together, who can?
- satvikpendem 3y agoNone of that gets to the browser.
- renegade-otter 3y agoThe whole point is to have JS on front-end and beck-end, right? What is serving the JS? Isn't the server Node? And large security surface means just one compromised package is required to get on the server side. If an npm update gives you security warnings after a few weeks of a vanilla project just sitting there, something is very wrong.
- satvikpendem 3y agoSure, you could say the same about any language too though. I've used static site generators in Rust too, or Python, it's the same problem. People still use them because the benefits outweigh the minute risk of being compromised.