Ask HN: Enterprise VuePress Deployment?

#1

Post by SeaDude » Mon, Sep 24, 2018, 4:28 PM UTC

Reading about the hot mess that is Node.js (pulled-dependencies, crypto miner-embeds, etc.)...

What is the sane way to deploy a Node.js project such as VuePress in the enterprise environment?

Is there one?

How do you vet the security of packages and their dependencies?

Re: Ask HN: Enterprise VuePress Deployment?

#2

Post by IloveHN84 » Mon, Sep 24, 2018, 5:00 PM UTC

In enterprise, I would never ever trust npm/yarn and all those projects downloading unknown libraries. In enterprise I believe the less you use JavaScript the better it is. Maybe you might want to use only jQuery but you should maybe stay on Vanilla JS.

Re: Ask HN: Enterprise VuePress Deployment?

#3

Post by SeaDude » Mon, Sep 24, 2018, 5:15 PM UTC

@IloveHN84: Thanks for the reply. When you say "...stay on Vanilla JS.", What do you mean?

Is it possible to run VuePress on Vanilla JS or are you saying stay away from all JS except Vanilla?

Re: Ask HN: Enterprise VuePress Deployment?

#4

Post by IloveHN84 » Tue, Sep 25, 2018, 12:15 PM UTC

SeaDude wrote: post #3

@IloveHN84: Thanks for the reply. When you say "...stay on Vanilla JS.", What do you mean? Is it possible to run VuePress on Vanilla JS or are you saying stay away from all JS except Vanilla?

Don't use Vue.js, use something easier and that requires almost no JavaScript.