Live data from Hacker News

Show HN: Electrico – Electron Without Node and Chrome

github.com

71–78 of 78 posts

Re: Show HN: Electrico – Electron Without Node and Chrome

#71
post #37

Earlier quoted context omitted.

an operating system's "native web view" (WRY) Isn’t that just a randomly abandoned version of something of uncertain origin, on average? Why would one want use it? I guess to save distribution space. I don’t have a “top”-deps itch, but using an arbitrary webview sounds compatibility hell even to me.

At this point most operating systems are ahead of Electron on average, not behind it. Electron takes longer to bundle a new Chrome version than it should. Then it takes a while for applications to actually upgrade Electron versions because that includes the compatibility headaches of keeping up with all of Chrome changes, Node changes, and Electron API changes at the same time. Some apps are years behind on Electron…

> Some apps are years behind on Electron today

Could you give some examples? This seems like a potential security risk.

Re: Show HN: Electrico – Electron Without Node and Chrome

#72

Earlier quoted context omitted.

At this point most operating systems are ahead of Electron on average, not behind it. Electron takes longer to bundle a new Chrome version than it should. Then it takes a while for applications to actually upgrade Electron versions because that includes the compatibility headaches of keeping up with all of Chrome changes, Node changes, and Electron API changes at the same time. Some apps are years behind on Electron…

> Some apps are years behind on Electron today Could you give some examples? This seems like a potential security risk.

Random output from my system:

App Name: Microsoft Azure Storage Explorer.app Electron Version: 25.8.4 -n File Name: /Applications/Microsoft Azure Storage Explorer.app/Contents/Frameworks/Electron Framework.framework/Electron Framework -e App Name: MongoDB Compass.app Electron Version: 30.4.0 -n File Name: /Applications/MongoDB Compass.app/Contents/Frameworks/Electron Framework.framework/Electron Framework -e App Name: Obsidian.app Electron Version: 25.8.1 -n File Name: /Applications/Obsidian.app/Contents/Frameworks/Electron Framework.framework/Electron Framework

And to answer your question: yes this is very much a security issue. There are many unpatched versions that are vulnerable to webp exploits, including chat apps (with the serious implications of that being obvious)

Web devs shouldn't be allowed anywhere near native APIs.

Re: Show HN: Electrico – Electron Without Node and Chrome

#73

Earlier quoted context omitted.

Renderers can access Node APIs via the ‘node integration’ setting or via a preload script.

Aren't these just IPCs disguised as normal function calls though? IIRC only the main node process does anything node, renderers can call "node functions" that really happen in the main process.

Not at all, in a renderer the Node and Chromium event loops are bound together, they’re part of the same v8 isolate, no IPC shenanigans.

The main process really shouldn’t be used for anything except setup. Since it controls gpu paints amongst other things, blocking on it will cause visible stuttering and a bad user experience.

https://www.electronjs.org/blog/electron-internals-node-inte...

Re: Show HN: Electrico – Electron Without Node and Chrome

#75

Earlier quoted context omitted.

It's great that you mention the climate impact of Electron apps, because those bloated monsters truly are a huge problem; though I think you underestimate how much the Tauri team's focus has been on shrinking app size to alleviate the environmental impact made by the download of said huge Electron apps. One of the things that actually made me interested in Tauri in the first place was their 1.0 Release[0] which inclu…

I understand where this guy was coming from with the comment about Tauri being the same type of thing, but when you really take a look at Tauri, it seems to really hold up. There are some Tauri apps that have performance that is easily on par with native. The only thing is that Tauri apps seem to be quite easy for the developer to botch and end up with performance problems. One of the worst performing apps I ever use…

> The only thing is that Tauri apps seem to be quite easy for the developer to botch and end up with performance problems. One of the worst performing apps I ever used in my life was a Tauri app.

I'd say that's generally true with web-based UIs. It's possible to create web UIs that perform fantastically. But you have to know the platform and be disciplined, and it's easy to mess it up.

Re: Show HN: Electrico – Electron Without Node and Chrome

#76
post #29

Is it possible to have some kind of electron/tauri/,.. based runtime, but without the actual app? The users would need to install this runtime only once. The apps would need to be installed separately. The apps could be just the plain html/js/css/assets maybe packed within a zip, with a dedicated extension. The runtime would take care of the installation. That way the devs could develop with their FE-stack of their c…

That's genius! I propose we call this system of apps "the World Wide Web" and call the runtime you install, a "Web browser".

Yeah the problem is web sites are way more restricted than apps in what they can do. Apps need to use native APIs. They need to be more active. x

Re: Show HN: Electrico – Electron Without Node and Chrome

#77
post #37
post #2

Looks like a thin wrapper around Tauri. The README doesn't do a good job at explaining why one should use this over Tauri itself. From what I understand, this project attempts to implement a subset of the Electron API so that the library can act as a "drop-in replacement" for simple enough Electron apps. If this understanding is correct, then I think Electrico has the potential to significantly boost adoption of Taur…

an operating system's "native web view" (WRY) Isn’t that just a randomly abandoned version of something of uncertain origin, on average? Why would one want use it? I guess to save distribution space. I don’t have a “top”-deps itch, but using an arbitrary webview sounds compatibility hell even to me.

> uncertain origin…?

A bit less uncertainty via: https://v2.tauri.app/reference/webview-versions/

Re: Show HN: Electrico – Electron Without Node and Chrome

#78

Earlier quoted context omitted.

The only thing I like about Electron apps is that they just work on Linux, otherwise not many companies would bother porting their apps to Linux. I think web apps/Electron apps may be a factor in reaching the year of the Linux desktop.

If Lazarus supported other languages beside Object Pascal, that would be the truly native multiplatform integrated development system the world is looking for.

Hm... maybe there is a case for Lazarus bindings to other languages like Rust. (Or, dare I say it, C++)
Post reply on HN