Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Ripple – A TypeScript UI framework that takes the best of React, Solid, Svelte

github.com

Post reply on HN
Print view View original

71–74 of 74 posts

Re: Ripple – A TypeScript UI framework that takes the best of React, Solid, Svelte

#71

Post by wewewedxfgdf »

Terretta wrote: post #69
trueadm wrote: post #62

Earlier quoted context omitted.

Please can you create a Github issue with the security holes you've found? That would be greatly appreciated. I've given it a sweep and found nothing.

Sibling's proposed approach is a recipe for false positives. Consider Claude Code's new /security-review prompt or just use the prompt starting from "Objective" after giving the context (see the Git shell commands) to Claude Opus 4.1. https://raw.githubusercontent.com/anthropics/claude-code-sec... Definitely Opus 4.1 though, not lesser.

I suggest do both.

Re: Ripple – A TypeScript UI framework that takes the best of React, Solid, Svelte

#72

Post by ixxie »

trueadm wrote: post #67
ixxie wrote: post #64

Earlier quoted context omitted.

Thank you for all your contributions! Svelte 5 is a blast. If you don't mind me asking, why did you leave? What do you plan on working on going forward?

It was a good time for change, I was working on Svelte 5 non-stop for two years! I'll be announcing my new role nearer the time :)

Makes sense xD

Best of luck! I'm curious to see what you come up with next.

Re: Ripple – A TypeScript UI framework that takes the best of React, Solid, Svelte

#73

Post by rhubarbtree »

tobyhinloopen wrote: post #54
rhubarbtree wrote: post #28

Earlier quoted context omitted.

Please keep OO away from web dev. The mess is bad enough and adding OO will only increase coupling.

Calling OO to increase coupling is a weird take in a world where React's "functional components" and similar patterns encapsulate their state and rendering pipeline.

Sorry, wrong word. I meant “complecting” but as no one outside of Rich Hickey’s talks will understand that I reached for the wrong word.

OO conflates data and methods, which makes systems harder to test, reason about, and debug, because functions are less pure due to the “hidden” internal state of an object.

It also encourages heavy constructs that can often be replaced with trivial data structures that are much easier to work with.

Let’s not get started on inheritance.

I think OO is widely discredited now, although I do see a few experienced programmers still using it.

Re: Ripple – A TypeScript UI framework that takes the best of React, Solid, Svelte

#74

Post by brazukadev »

wewewedxfgdf wrote: post #68
trueadm wrote: post #62

Earlier quoted context omitted.

Please can you create a Github issue with the security holes you've found? That would be greatly appreciated. I've given it a sweep and found nothing.

Make a minimal zip of the the source code only (cut out anything not source code) drop it into ChatGPT and say "analyse this code for security flaws". Then ask it for more. Then do the same this with Google AI studio - drop the zipfile in and ask it to analyse for security flaws.

If you already did so why not share the answers you got?
Post reply on HN