Every dependency you add is a supply chain attack waiting to happen

6 months ago by codeinabox to c/programming

Dependencies are a huge supply chain security risk; the more of them you have, and the more often you update, the bigger the attack surface.
load all comments
transporter_ii 9 points 6 months ago

No build with AlpineJs is now the future. I've been saying for many years that creating a "hello world" page that generates tens or even hundreds of thousands of files is kind of nuts. Every one of those files could be a security issue.

path: 0 23005395, hotness: undefined, score: 9, children: 7
Kissaki 4 points 6 months ago

What's the advantage of AlpineJs vs baseline web technologies?

Scrolling through the simple intro examples, I would have implemented those with standard JS and DOM APIs just fine.

path: 0 23005395 23009930, hotness: undefined, score: 4, children: 6
shnizmuffin 4 points 6 months ago path: 0 23005395 23009930 23015044, hotness: undefined, score: 4, children: 4
transporter_ii 2 points 6 months ago

It's offers a syntax similar to a no-build VUE. This gives you a more standard, modern way of doing things that a lot of people already know how to do. And it does it without generating many thousands of files and dependencies just to create a "hello world" page. Most anyone that could figure out VUE code should be able to look at AlpineJS code and figure out what is going on. I could very easily use vanilla JavaScript to do everything. Good luck on you figuring any of it out in a timely manner if you inherited any of the code.

I'm mostly doing database CRUD with it. I'm really impressed with how easy it is to make a somewhat complex form with a minimal amount of (mostly clean) code.

That said, I do not really like the inline coding that they push in all the documentation. I much prefer separating the code using Alpine data(). It's much easier to debug.

path: 0 23005395 23009930 23075394, hotness: undefined, score: 2, children: 0
programming
programming

@programming.dev

login for more options
28803
3719
3327

Welcome to the main community in programming.dev! Feel free to post anything relating to programming here!

Cross posting is strongly encouraged in the instance. If you feel your post or another person's post makes sense in another community cross post into it.

Hope you enjoy the instance!

Rules

Rules

  • Follow the programming.dev instance rules
  • Keep content related to programming in some way
  • If you're posting long videos try to add in some form of tldr for those who don't want to watch videos

Wormhole

Follow the wormhole through a path of communities !webdev@programming.dev


go to feed...