Live data from Hacker News

EmDash – A spiritual successor to WordPress that solves plugin security

blog.cloudflare.com

121–130 of 558 posts

Re: EmDash – A spiritual successor to WordPress that solves plugin security

#122

Earlier quoted context omitted.

wordpress is valuable because it allows very bad developers / marketing people to write very bad code and get away with it, driving extremely low cost solutions for clients who are cost concious. yes you want a global db handle sure ya lets delete all tables woohoo

> wordpress is valuable because it allows very bad developers / marketing people to write very bad code and get away with it, driving extremely low cost solutions for clients who are cost concious. You've sort of nailed it, but this isn't a bad thing. An alternative for these customers does not exist. There's another vertical which is organizations that have armies of writers churning out content. Any kind of publish…

yep. we like it because with shopify or other platforms, you run into limitations. with Wordpress I can literally just whip it into whatever shape i want.

Re: EmDash – A spiritual successor to WordPress that solves plugin security

#124

Convince me this isn’t vibeslop. If Cloudflare really have radically changed their software development philosophy lately, this would actually be an interesting project, being based on Astro and coming with some APIs for programmatic management. Them being so happy about the „cost of software development“ and not going very deep into ecosystem, community or project management doesn’t convince me that this is going to…

I'm the main engineer on this. I've also been on the Astro core team for two years, so I do think I understand real open source software and community.

As the post implies, I did use a lot of agent time on this, but this isn't a vibe-coded weekend project. I've been working full time on this since mid-January.

Re: EmDash – A spiritual successor to WordPress that solves plugin security

#126

the plugin security problem in WordPress was never really a code quality problem - it was a trust model problem. any developer could publish a plugin and any site owner could install it with one click, with no vetting layer in between. TypeScript and serverless doesn't change that dynamic unless the trust model changes too. curious how EmDash handles third-party plugin permissions at the API boundary.

It runs each sandboxed plugin inside its own dynamic worker, with a separate bridge worker to enforce permissions. The worker only has access to its permitted APIs.

Re: EmDash – A spiritual successor to WordPress that solves plugin security

#128

Earlier quoted context omitted.

wordpress is valuable because it allows very bad developers / marketing people to write very bad code and get away with it, driving extremely low cost solutions for clients who are cost concious. yes you want a global db handle sure ya lets delete all tables woohoo

> wordpress is valuable because it allows very bad developers / marketing people to write very bad code and get away with it, driving extremely low cost solutions for clients who are cost concious. You've sort of nailed it, but this isn't a bad thing. An alternative for these customers does not exist. There's another vertical which is organizations that have armies of writers churning out content. Any kind of publish…

>> wordpress is valuable because it allows very bad developers / marketing people to write very bad code and get away with it, driving extremely low cost solutions for clients who are cost concious.

> You've sort of nailed it, but this isn't a bad thing. An alternative for these customers does not exist.

Yes! I'm locked into WordPress, which I hate, because it's the only platform that will allow a non-developer to maintain it if I get hit by a bus.

Re: EmDash – A spiritual successor to WordPress that solves plugin security

#129

It's a shame they don't seem to try to address the divide between CMS's and static sites. Most WordPress sites could just be static, but WordPress has a nice editor interface, so they're not - unless you use a SSG plugin. Building that into the core workflow (which I believe Astro supports) and giving users a nice hosted editor that produces a static site would be welcome innovation.

The issue with static sites is they can't do comments.

I bet 99.9% of live Wordpress sites no longer have comments enabled.

Re: EmDash – A spiritual successor to WordPress that solves plugin security

#130
post #49

I don't think it's the code that makes WordPress valuable. I've been learning WordPress recently and haven't been too impressed with the internals. WordPress is valuable because of the ecosystem and support. I have no doubt that WordPress will still be a thing in ten years. What's the support plan for EmDash? I see commits are mostly from a single developer. E: Oh, I think it's an April fools joke, I'm embarrassed. E…

Cloudflare doesn't do April fools jokes. In fact, 1.1.1.1 was released on April 1st back in 2018 and now it's one of the most used DNS service in the world.

[dead]
Post reply on HN