samtp - I think you're looking for the answer to two or more problems here.

  - Can I trust that a plugin is (relatively) secure?  
  - Can I trust that the plugin will be maintained?  
  - Can I trust that the plugin will be good quality and work as described?

That's something WordPress haven't been able to do - so I'd say well done to the EmDash team! And, if I wasn't building my own CMS (with a very similar permission model) then I would probably be trialling it right now :)

> I am just tired boss. I am not going to look at your app.

Hey, I feel bad for you. I would say try and avoind HN if you don't want to see AI.

But, in this case, I want to respectfully disagree with you. I read the frontpage of HN almost daily, I never really jump into conversations, for this post about EmDash I am absolutely qualified to contribute.

There are precisely 2 open source projects in existence (proove me wrong) where the "Worker Plugin" architecture has been taken. Mine and EmDash. Looking at some of the code examples from EmDash was like looking at my own docs.

If you don't want to look at my app, then fine. But please don't gatekeep, I'm qualified to talk here.

Years ago, I would have said small bussinesses are on cPanel, FTP-ing files to the server. Asking them to run NodeJS is crazy. But here we are, the hosting landscape is vastly different, is it still so crazy to ask a small business owner to put there code on GH, connect GH to a hosting platform and push?

---

Anyway, I doubt you will see people dropping off WP and migrating sites to EmDash. What's more likely will be that it is considered as an alternatave for new projects.

IMO most sites like that would be better to pick no-framework, vanilla or jQuery for interactivity.

I can't image average WP users would be happy to move to EmDash, only to have a constant stream of dependabot updates for Astro.

It has 55 direct (non-dev) dependencies https://www.npmjs.com/package/astro?activeTab=dependencies - while ejs has 0 and nunjucks has 3.

I'm weary of updates, maybe it's just me, but I doubt it.

- I've been done GraphQL server with a build step to share types between languages.

- I've used untyped JS client side code.

Both are prone to bugs, and not much fun.

TS for front and back end: sharing types means you'll have editor type hints, catch type errors at lint (or build), and you might even share validation logic between client and browser.

I've given the security, or lack of, WP a lot of thought recently. In WP malicious plugin has access to the database, enfironment variables, rendering text on screen (think XSS). Luckily, a thoughtfully designed plugin system can mitigate all of those issues.

I've been working on a headless CMS in my spare time that is eirily similar to EmDash in a few ways. It's in very early development, but I will share regardless. It's called HotsauceCMS - https://github.com/hotsauce-team/hotsauce

- I went with optional NodeJS or Deno Worker plugins, this means that first-party plugins can benefit from the speed of in-process, and other plugins can be run in Workers. For fine grained permission control, you can use Deno Workers.

- I went with absolute minimal dependencies, I am so fed up with Dependabot alerts and npm supply chain hacks. My CMS has only 4 dependencies, 0 transistive dependencies.

- It's Drizzle schema first, and headless. So you have full controll of the database structure, use cms hints in your schema for features like file upload.

- It's database-agnostic, so it works with any Drizzle-supported database (Postgres, MySQL, SQLite)

- Being headless, you can use any frontend, my preference is JSX w/o react, but anything goes.

Feedback is absolutely welcomed on HotsauceCMS, did I miss a trick, am I on the right track?

Anyway, congratulations on EmDash. I'll be following closely, excited to see how the next few months unfold.

n=1 ... a tripple dose of omega-3 capsule gives me a noticalbe improvement in my depression within 24 hours.

Comments URL: https://news.ycombinator.com/item?id=38188056

Points: 2

# Comments: 0

Not a single mention of natural world.

Comments URL: https://news.ycombinator.com/item?id=29495612

Points: 2

# Comments: 1

https://www.eurekalert.org/news-releases/930043

Not much curiosity when it comes to food, but it sounds like he's interested in nature.

And to say that he is rejecting the other foods is a bit of a stretch, I mean, for example, are you rejecting a career as a sheep farmer? You might love it.

Or maybe you're content with something too