Ask HN: Enterprise VuePress Deployment?

2 points by SeaDude 7y ago ↗ HN

Reading about the hot mess that is Node.js (pulled-dependencies, crypto miner-embeds, etc.)...

What is the sane way to deploy a Node.js project such as VuePress in the enterprise environment?

Is there one?

How do you vet the security of packages and their dependencies?

3 comments

[ 3.0 ms ] story [ 18.4 ms ] thread

In enterprise, I would never ever trust npm/yarn and all those projects downloading unknown libraries. In enterprise I believe the less you use JavaScript the better it is. Maybe you might want to use only jQuery but you should maybe stay on Vanilla JS.

SeaDude 7y ago ↗

@IloveHN84: Thanks for the reply. When you say "...stay on Vanilla JS.", What do you mean?

Is it possible to run VuePress on Vanilla JS or are you saying stay away from all JS except Vanilla?

IloveHN84 7y ago ↗

Don't use Vue.js, use something easier and that requires almost no JavaScript.