Deno is excellent I really regret not using for my most recent node project
Deno Is Webby
201–210 of 215 posts
Re: Deno Is Webby
#202Earlier quoted context omitted.
if i have to think about what the browser-equivalent operation would be when i'm working with a server-side API, i'm going to use a different language entirely.
Sure, but then why would you use Javascript in the first place? The situation deno is trying to address is that JS developers need to memorize two standard libraries, one for browsers and one for node. You should be able to work with one standard library like you can in most other languages. The first attempt at this was to port the node standard library to the browser via browserify and the like. This tended to crea…
im all for standardizing overlapping functionality, but not standardizing just for the sake of it.
node 17 is bringing the fetch api to core which to me makes perfect sense. theres definitely no point in node creating their own version of fetch. and fetch is useful on both the browser and server, given that fetch is an easy way to facilitate a client-server connection over http/s. perhaps the same applies to window.crypto.
i think you start to lose the benefit of standardization when: 1. half the api gets repurposed to try to fit a (in some cases, completely subjective) counterpart 2. functionality isn't 1:1
Re: Deno Is Webby
#203Earlier quoted context omitted.
For scripts, it's pretty sweet to be able to import dependencies directly via URL without needing to do an `npm init` and `npm install`. For larger projects (like my static site generator), I didn't find it tedious to import from a central deps.ts file, although I admit that importing from a relative path like '../../deps.ts' is not as quite as nice as importing by package name like in Node. I'm OK with that the trad…
What about transitive dependencies?
My question too. I assume Demo downloads one component and then all its nested dependencies. But now every nested dependency can come from a different server, just like the components you refer to can come from anywhere on the internet.
I wonder if this could be a security issue. It's hard to know who has control over all those nested repositories, and who keeps a look on them to ensure they are not maliciously modified? Is anybody checking on cryptographic signatures of them?
Only asking because I don't know much about Demo.
Re: Deno Is Webby
#204Earlier quoted context omitted.
What about transitive dependencies?
My question too. I assume Demo downloads one component and then all its nested dependencies. But now every nested dependency can come from a different server, just like the components you refer to can come from anywhere on the internet. I wonder if this could be a security issue. It's hard to know who has control over all those nested repositories, and who keeps a look on them to ensure they are not maliciously modif…
Locked modules have their hashes stored, so if something does change, you'll know right away. So will anybody else who got the source from you with lock.json included.
Re: Deno Is Webby
#205Earlier quoted context omitted.
My question too. I assume Demo downloads one component and then all its nested dependencies. But now every nested dependency can come from a different server, just like the components you refer to can come from anywhere on the internet. I wonder if this could be a security issue. It's hard to know who has control over all those nested repositories, and who keeps a look on them to ensure they are not maliciously modif…
Locked modules have their hashes stored, so if something does change, you'll know right away. So will anybody else who got the source from you with lock.json included.
So, this is kinda unusable for any corporate setting where all dependencies, including transitive ones, are downloaded from a private server.
Re: Deno Is Webby
#206Earlier quoted context omitted.
A couple of questions: “Make [] false-y” Why? “Add macros” Why? How? “Bring back `with`” Why?
What about not making [] any kind of boolean? Let's be explicit and use [].empty() or something, implicit conversions are confusing.
> implicit conversions are confusing.
Are they? All of them? 0:1 F:T? Boolean and binary are and should be distinct, and never the twain shall meet? A bold thesis in the world of computing.
Context-sensitive meaning is something people navigate all the time. You probably do it in some software contexts w/o even realizing it (and we all do it with human language and relationships w/o thinking consciously about it).
It's most likely to be confusing if you're unfamiliar with the context, or if the context-specific rules turn out to be convoluted.
0:1 maps on to F:T or even nothing:something or empty:non-empty pretty effortlessly. Even rigorously, with the right level of attention.
Implicit can mean subtle. Whether that means confusing (or whether there's some other cognitive load imposed by some forms of subtlety) is a separate question. And probably subjective.
Explicit can be a virtue. Concision can also be a virtue, and sometimes context-sensitivity promotes that.
Re: Deno Is Webby
#207Earlier quoted context omitted.
Well... CDNs aren't supposed to go down, but if they do suffer an outage, Deno caches dependencies locally. If that's still not enough, you can also just download the JS file and import from a local path or use the vendoring feature.
Not sure that “CDNs aren’t supposed to go down” is a very reassuring point, nor one that Deno’s authors would make in its defence. Deno’s vendoring approach isn’t like a stopgap in case third party servers go down. It’s the ’right’ way in Deno, and is another brilliant fix to Node’s approach. Node always makes you go through a formal step to install a dependency - and then you’re still reliant on npm’s CDN being onli…
> you’re still reliant on npm’s CDN being online during your builds
Why? I'm building my program out of components in my node_modules -folder. Why do I need internet?
Re: Deno Is Webby
#208Re: Deno Is Webby
#209Earlier quoted context omitted.
Removing alert is nonsense, and I don't think they will ever do (without breaking a ton of websites that use it). Why as a developer should I have to make a modal with HTML+CSS+JS to show it to just have a prompt that inform the user about something? Ok, alert is ugly, but for a lot of situations (= industrial software) it's perfectly acceptable.
Why as a user should I have to endure a website with an intrusive user of alert? I don't care what happens to websites that use alert, I never want to see my browser get locked up because of lazy devs wanting to use alerts.
Browsers are well equipped to deal with alert() abuse. You can usually block them after the second one.
Re: Deno Is Webby
#210Earlier quoted context omitted.
Locked modules have their hashes stored, so if something does change, you'll know right away. So will anybody else who got the source from you with lock.json included.
So, this is kinda unusable for any corporate setting where all dependencies, including transitive ones, are downloaded from a private server.
Er, why? You'd just set up an import map to point it at your private server.