Programmer Humor

hideshow 2 child comments

parent

[–] SuperSpruce@lemmy.zip 9 points 1 year ago (1 child)

Vulnerabilities are flaws in software that may allow an attacker to gain control of or eavesdrop a system.

They are categorized into low, medium, and high severities based on how easy it is to exploit the vulnerability and how much damage a successful attack utilizing that vulnerability would do.

parent

[–] Contentedness@lemmy.nz 6 points 1 year ago

I'll add that you get these vulnerability reports whenever you install a new module into a node project, though the example here is extreme.

parent

[–] ddplf@szmer.info 4 points 1 year ago* (last edited 1 year ago) (8 children)

Which is of very little importance in most cases, because modern bundlers incorporate treeshaking in order to filter out all the unused code when you're building a production application

Edit: okay well appearently that's controversial for some reason

hideshow 8 child comments

[–] BlueMagma@sh.itjust.works 6 points 1 year ago (5 children)

I didn't know about treeshaking (still unsure what it is exactly since I'm not a js Dev), but I'm guessing it still takes up Gigs of space in the project folder of every Devs PC, duplicated for each project.

hideshow 5 child comments

parent

[–] ddplf@szmer.info 6 points 1 year ago (2 children)

It does take a lot of space for devs, but personally I find that absolutely irrelevant, because it's your end user's experience that really matters, and - as a dev - you are most likely to have a much better rig and internet connection than your average Joe.

hideshow 2 child comments

parent

[–] jim3692@discuss.online 4 points 1 year ago* (1 child)

Sure, in many cases the dev's computer is powerful enough to handle that.

However:

The more the dependencies, the more likely it is to pull-off a supply chain attack. Any of those thousands modules can be compromised and infect either the user or the developer.
Not all computers are optimized for working with so many tiny files. Have you ever worked in a company that uses McAfee Antivirus? Even Defender can be a massive performance hit in some cases.

parent

[–] ddplf@szmer.info 2 points 1 year ago

I have to say that I may be a bit ignorant, because I'm mostly engaged in greenfield projects with very tiny devteams and I always keep my dependencies count low as possible

Thank you for pointing this out, that's very valuable to keep in mind

parent

[–] Pieisawesome@lemmy.dbzer0.com 3 points 1 year ago

Tree shaking is essentially reducing the amount of included code to only the stuff being used.

Let’s say you have a JAR, DLL, or whatever with 5 functions.

Your application calls function A which also calls function B of the DLL/jar.

Tree shaking says “hmm, if I follow the code execution path, I only need 2/5 functions from the DLL/jar” and discards the remaining 3/5 functions.

This significantly reduces the bundle size (the bundle is what is sent to the browser).

parent

[–] dazeous@lemmy.ml 3 points 1 year ago

Some use 'pnpm' package manager, alternative to default, where the packages are downloaded once to a central location, and per project directory, it links to the original location so files aren't duplicated saving space

parent

[–] dazeous@lemmy.ml 4 points 1 year ago (1 child)

node_modules might take a lot of space on a dev machine, but as op said, only the files used are packed into web artifacts that are deployed.

So 12gbs can end up as 10mb, arbitrary number to highlight significance of tree shaking.

parent

[–] cupcakezealot@piefed.blahaj.zone 2 points 1 year ago

this assumes the dev is smart enough to do --save-dev

parent

[–] manxu@piefed.social 55 points 1 year ago

That's the thought I always had: When I develop in Node, I stand on the shoulders of ten thousand microbes.

[–] RustyShackleford@programming.dev 49 points 1 year ago (3 children)

Just fucking use HTML.

hideshow 3 child comments

[–] RustyShackleford@programming.dev 53 points 1 year ago* (1 child)

"Why not write Assembly then?"

Oh, here comes the genius motherfucker with the big-brain counterargument: "Well, if HTML's so great, why not just write everything in Assembly, huh?". Wow, look at you, you clever little prick. Did you come up with that all by yourself? Writing web pages in Assembly is like using a fucking scalpel to slice your overcooked steak: sure, it'll get the job done, but you're gonna look like a complete asshole while you're at it. HTML just works, you absolute tool. It's been the backbone of the web since Al Gore flipped the switch, and it'll still be here long after your trendy framework is rotting in a GitHub graveyard. So take your smartass logic and shove it. HTML's king, and you're just a peasant with a keyboard.

🤣

parent

[–] mintiefresh@piefed.ca 11 points 1 year ago

💀💀💀

parent

[–] Rooskie91@discuss.online 6 points 1 year ago

If you don't believe HTML is enough, check any socialist/communist web page.

parent

[–] frezik@midwest.social 33 points 1 year ago (5 children)

I'd like full stack developers to try something. Next time you have an itch for a personal project, see if you can make it with no frontend JavaScript. Just some CSS and HTML forms. All templating handled on the backend. Just try it and see how far you get. Don't worry if it looks like a GeoCities page.

Then try finding places where JavaScript would make it more responsive or better UX in some way. Does the back button still work? Is it actually faster? Does it provide any benefit at all?

Maybe it does, but just try.

hideshow 5 child comments

[–] CosmicTurtle0@lemmy.dbzer0.com 22 points 1 year ago (3 children)

I'm a JavaScript developer. But it is fully possible to create a site with no frontend JavaScript

Like many things, you should use JavaScript if you need it. If you don't need remote data sources or live refreshes, pure html and css work perfectly fine and, I would go so far as to say, may even be necessary for resistance web pages.

This is especially true if you're using tor. JavaScript can leak your IP address and sites will work more reliability if you have static content that's refreshed on the back end than using a bloated next.js app taking up RAM.

hideshow 3 child comments

parent

[–] gofsckyourself@lemmy.world 1 point 1 year ago* (2 children)

The vast majority of those are useless animations. Some are even a much worse implementation of something done much simpler with JS and requires significantly more code weighing down the page speed. Some examples of this are the cursor tracking examples which use hundreds of divs in a grid.

While there are some useful examples, it seems like this repo is more of a list of to show off advanced CSS, fancy animations, and designs.

hideshow 2 child comments

parent

[–] frezik@midwest.social 4 points 1 year ago (1 child)

Yeah, those are mostly showing off. They're not really what I'm getting at, either. I more want to challenge people to make useful things simply.

And yes, there are ways that JavaScript can be used to give users a faster and more streamlined experience. The web as it stands is so far past that justification. I swear there's lots of "full stack" devs that haven't a clue how to make a site without React.

parent

[–] gofsckyourself@lemmy.world 2 points 1 year ago

Hell, there's way too many "full stack" developers that don't even know how domains work.