Live data from Hacker News

Show HN: Budibase – An open-source low code platform

budibase.com

71–80 of 109 posts

Re: Show HN: Budibase – An open-source low code platform

#73

I notice you've used two different programming languages to express application logic. A the high-level, you have automations, which are simple but look very limited in terms of capabilities (i haven't studied this part in great detail, but does its support things like looping, arbitrary conditional expressions, and an abstraction mechanism like user-defined functions?). At the low level, you have JavaScript to do fi…

I’ve read your abstract and it looks very interesting! I’ll be diving into the rest as I find time over the next few weeks thanks for sharing! And well done on this piece of work!

It was interesting to me that you mentioned “functional programming as a model for data-oriented workflow languages”. I find it interesting because we are building Lowdefy [0] with which you can express feature rich apps in yaml / json, and have been considering how to implement DAG type stuff in future versions.

We’ve taken a lot of inspiration from Mongodb aggression query language and as a result built a json / yaml parser which evaluates functions (operators) to implement logic throughout the app. This proved to be extremely flexible, easy to use for data manipulation, and surprisingly performant as we can actually evaluate the expressions during the render loop.

Going to read more parts of your thesis.

[0] - https://github.com/lowdefy/lowdefy

Re: Show HN: Budibase – An open-source low code platform

#74

Installing the budibase server from npm pulls in over a thousand transitive dependencies. The npm install command reports that there are 39 known vulnerabilities in budibase's dependencies, including 9 that are classed "high" and 3 that are "critical" severity. The dependency graph includes a lot of crap, like packages containing trivial single-line functions like "is-object" and "is-stream". That's a very large atta…

Hi, Thanks for the comment. We have just undergone a full security audit as of 2 weeks ago - any infrastructure or code vulnerabilities are currently being worked on. Many JavaScript projects contain huge dependency trees - it is unfortunately the nature of a 3rd party module-heavy ecosystem, and can be hard to tame the sheer size of the tree. We will update or pin dependencies as needed, to solve the security issues…

[deleted]

Re: Show HN: Budibase – An open-source low code platform

#75
I really appreciate how forward your product is with pushing the open source version. After clicking around for a bit in Cloud, it made is so easy to commit to a local install.

Budibase is definitely a product I could see preferring to spend on Enterprise, unless there was a very compelling my team could accomplish "more" with self-hosting. I just ask that if you end up with some sort of per-user/seat fee, that you follow Slack's lead and charge only for activity. This will win my heart over.

Also, custom domain support. Execs love their vanity URLs.

Re: Show HN: Budibase – An open-source low code platform

#77

I really appreciate how forward your product is with pushing the open source version. After clicking around for a bit in Cloud, it made is so easy to commit to a local install. Budibase is definitely a product I could see preferring to spend on Enterprise, unless there was a very compelling my team could accomplish "more" with self-hosting. I just ask that if you end up with some sort of per-user/seat fee, that you f…

Thank you! I hear you with the pricing for activity. It's definitely something that we will consider.

And who doesn't love a vanity URL?!

Re: Show HN: Budibase – An open-source low code platform

#79
post #68

I attempted to use this a few months ago to prototype a unified ticketing solution (just an experiment to see if it would be worth adopting for small internal apps) using pre-existing mongo data. Seems super early to use this for anything serious in my view. TL;DR - It ended up being orders of magnitude faster for me to just build it from scratch. One of the biggest general UX issues I encountered was how data source…

Check out Lowdefy - https://github.com/lowdefy/lowdefy It is open source, self hosted and you write your apps in config (yaml / json). So your are not trapped in a UI, you are free to copy paste find and replace and you can version control as you like. Also, we use it extensively with mongo. Shameless plug. Cofounder of Lowdefy

Thanks! Just looked through the docs, looks very well thought out.

I mentioned elsewhere in this thread that no/low-code tooling rarely ever works out in my org (mostly because its hard to make a generic framework to encompass what we like to do with internal tooling) — but will absolutely check this out and provide some feedback if I think I have something useful to contribute.

Cheers.

Re: Show HN: Budibase – An open-source low code platform

#80

Installing the budibase server from npm pulls in over a thousand transitive dependencies. The npm install command reports that there are 39 known vulnerabilities in budibase's dependencies, including 9 that are classed "high" and 3 that are "critical" severity. The dependency graph includes a lot of crap, like packages containing trivial single-line functions like "is-object" and "is-stream". That's a very large atta…

You are giving far too much credence to npm audit and the severity of those warnings.

What ones did you see that you think can "compromise" this JavaScript application? I'd be curious.

Post reply on HN