Vite+ Beta

(voidzero.dev)

172 points by Erenay094 hours ago

17 comments

  • pier2546 minutes ago
    I think they should find a better name for this project. I find it very confusing since it&#x27;s not really a better Vite.<p>At the time Void Zero was probably looking to monetize the Vite brand but now that they&#x27;ve been acquired by Cloudflare they don&#x27;t need to do that anymore.
  • sailorganymede2 hours ago
    I am a big fan of Vite. But I have zero clue what those other tools are. I swear to God, I just put my head down to do some work and all the sudden, frontend tooling has evolved. I wonder if there is a push towards a &quot;boring but works&quot; stack.
    • bhouston1 hour ago
      &gt; But I have zero clue what those other tools are.<p>The incorporated tools are actually really amazing:<p>- vitest, an ultra fast test runner. After using a lot of others, including jest and node&#x27;s built in one, I love vitest.<p>- oxlint, replaces eslint but is compatible with its file format and ultra fast, since it isn&#x27;t written JavaScript. I tried biome, but I found oxlint to have more rules and the eslint compatibility was nice.<p>- oxfmt, replaces prettier and is faster since it isn&#x27;t written in JavaScript.<p>- rolldown, replaces rollup and is compatible with it but it is much faster since it isn&#x27;t written in JavaScript.<p>The above are my go-tos in new projects anyhow since they are killer good and fast.
      • mort9636 minutes ago
        I don&#x27;t get how a test runner can be &quot;ultra fast&quot;. Surely all the time is taken by the tests, not calling the test functions?
        • andrewingram28 minutes ago
          At work we&#x27;ve tried switching to vitest, and it&#x27;s 1.5-2x slower than Jest (I think it&#x27;s related to our very large and circular module graph), so performance is very much a your-mileage-may-vary thing.
      • herpdyderp1 hour ago
        I wish Oxfmt supported plugins. Prettier&#x27;s plugin API is one of the worst APIs I&#x27;ve ever worked with. I&#x27;m eager to switch to a different formatter with a better plugin API (and I need plugins).
        • pier2551 minutes ago
          I was excited about Oxfmt until I tried it and found that it&#x27;s mostly intended to be a Prettier replacement. Ugh.
        • bhouston1 hour ago
          Have you tried contributing a system for that?
      • pier2550 minutes ago
        Rolldown is used in Vite (non plus) though.
    • skybrian9 minutes ago
      I’ve bounced off Vite because I don’t see a big advantage over esbuild. (I also use Deno.) What do you find useful?
    • skybrian11 minutes ago
      I’ve bounced off Vite because I don’t see a big advantage over esbuild. What do you find useful?
    • jstnh2 hours ago
      the other tools are for testing, bundling, linting and formatting. Previously you would use different tools from very different open source projects for these things, with different configurations, update cycles etc. Now it&#x27;s all covered by one simple toolchain. Vite+ is basically the &quot;boring but works&quot; stack, while also being more performant and with less configuration required.
    • beaker522 hours ago
      This is the latest emerging &quot;boring but works&quot; stack.
      • mort9635 minutes ago
        &quot;Latest emerging boring but works&quot; sounds like an oxymoron.
    • mmusc1 hour ago
      I&#x27;m currently experimenting with a stack combining assistance, ASP.NET Razor Pages, and htmx, specifically to avoid dealing with the complexities of the modern frontend stack.<p>AI eliminates a lot of the tedium, grinding tasks, while HTML partials and htmx complement each other perfectly.<p>Not having to manage frontend framework, SSR states is incredibly liberating. Sprinkle in some vanillla js and redraw specific parts of the page as needed... done
    • hiccuphippo2 hours ago
      That&#x27;s what I liked from Bun&#x27;s proposition. A single binary that just works. Hopefully the others take notice.
    • Tadpole91811 hour ago
      &gt; Vite, Vitest, Rolldown, tsdown, Oxlint, and Oxfmt<p>You already use the first, the second you <i>should</i> be using and has existed for years - it&#x27;s a jest-compatible runner integrated to Vite.<p>Rolldown is a part of Vite already (since version 8, alongside other implementing tools like lightnincss).<p>The ox* suite are native replacements for eslint and prettier. The latter has existed for years. Both of them aim to be drop-in compatible soon.<p>This <i>is</i> a boring stack.<p>FWIR, prior to the purchase by Vercel (or was it Cloud flare?), Vite+ was going to be a convenient, no fuss, low movement way set up projects that they sold to businesses for funding.
      • nicce51 minutes ago
        &gt; This is a boring stack.<p>I think the boring stack would skip the need for most of these. That is 5 different tools to write TypeScript in order to get some HTML, CSS and JavaScript for things that are not covered by modern web standards. Not including the frameworks itself which mostly have the same goal.
      • chrisweekly50 minutes ago
        Cloudflare.
    • scrapcode2 hours ago
      I guess I&#x27;m just an old man pumping my fist and yelling at the clouds at this point, but I think compartmentalizing every possible aspect of development and then making each one of those as complex as possible lead AI in the bureaucratic deterioration of the trade.
    • CodingJeebus1 hour ago
      A &quot;push&quot; towards a boring stack? That won&#x27;t happen because the hype cycle trends towards new tools like water down a river. But if you&#x27;re looking, I can&#x27;t recommend Rails enough in 2026. Built on web standards, it&#x27;s quietly pushing the framework forward and is so much less maintenance than modern JS apps.
  • adeptima1 hour ago
    Extremely happy user of Vite, Vitest, Rolldown, tsdown, Oxlint, and Oxfmt.<p>I do have lot of hardforked packages, and dont want to look back. Everything just works.<p>If you confused by the naming, start from Oxlint <a href="https:&#x2F;&#x2F;oxc.rs&#x2F;docs&#x2F;guide&#x2F;usage&#x2F;linter" rel="nofollow">https:&#x2F;&#x2F;oxc.rs&#x2F;docs&#x2F;guide&#x2F;usage&#x2F;linter</a> Rolldown <a href="https:&#x2F;&#x2F;rolldown.rs&#x2F;" rel="nofollow">https:&#x2F;&#x2F;rolldown.rs&#x2F;</a><p>Did very little changes to tsconfig during past 6 months adoption<p>My day-to-day process - get the new package unless it some antd6, echart or some rendering engine or geo spatial lib, clean up with Claude, strict and unify type system and align it with my vite, tsconfig, oxlint tastes. The result - no need to follow libs bloat and supply chain attack issues. Easy to read, easy to fix.
  • KronisLV3 hours ago
    I love Vite, Vitest, Oxlint and Oxfmt and look in their direction for most of my new projects! I hope these folks manage to get a bunch of money and can fund the continued development for at least the next decade.<p>Sure beats opening some ancient project and seeing some mix of Gulp, Grunt, webpack and a bunch of other disjointed stuff (I migrated that one over to also use the newer stack).
    • snorremd3 hours ago
      &gt; I hope these folks manage to get a bunch of money and can fund the continued development for at least the next decade.<p>I believe VoidZero has been acquired by Cloudflare [1], so money should not be an issue. Question is if Cloudflare will be willing to continue letting these people work on Vite and Vite+ features that benefit all cloud platforms, not just Cloudflare.<p>1. <a href="https:&#x2F;&#x2F;blog.cloudflare.com&#x2F;voidzero-joins-cloudflare&#x2F;" rel="nofollow">https:&#x2F;&#x2F;blog.cloudflare.com&#x2F;voidzero-joins-cloudflare&#x2F;</a>
    • GCUMstlyHarmls2 hours ago
      &gt; Sure beats opening some ancient project and seeing some mix of Vite, Vitest, Oxlint and Oxfmt and a bunch of other disjointed stuff (I migrated that one over to also use the newer stack).
      • KronisLV2 hours ago
        I mean if I see those in N years, I&#x27;ll be happier than with the older stack that came before them - the jank levels seem to generally be decreasing with every next attempt to get things right!
    • dominicrose2 hours ago
      Making all this (for example) work nicely together can be tricky: Vite, ESLint, Prettier, Typescript and React, especially if it&#x27;s full stack with SSR.<p>If you only focus on the front-end and remove Typescript from the equation it becomes easy enough. We&#x27;ll have to see if Vite+ helps for the more complex cases.
  • ronbenton3 hours ago
    Truly have so much trouble keeping up with the frontend (or JavaScript?) ecosystem. I so miss working in laravel. Wish more jobs paid well to use it.
    • dominicrose2 hours ago
      Trust me you don&#x27;t want to work with Laravel Livewire and Alpine.js, that would still require keeping up and for a less than satisfying result.
      • TheCapeGreek2 hours ago
        Because VILT is dead and Livewire is now on version 1100?<p>I&#x27;ve worked on both stacks in the last few years across several clients. Honestly like with anything in tech it seems to mostly fall apart with half-regarded usage of the tools in growing teams that don&#x27;t care about their quality in favour of &quot;get ticket done&quot;.
    • crumb1e2 hours ago
      I feel ya, we&#x27;re slowly phasing out our Laravel monolith for python lambdas. I miss those beautiful Laravel 6 days!
    • dgellow2 hours ago
      you actually don&#x27;t have to keep up, whatever you were using still works
  • montroser2 hours ago
    Vite had <i>five</i> major version in the <i>four</i> years 2022-2026. Version 3 =&gt; 4 =&gt; 5 =&gt; 6 =&gt; 7 =&gt; 8. Each one of those had breaking changes and required devs to go through a migration. It&#x27;s too much. And for what? It&#x27;s not as if it is dramatically better now than it was in version 3.<p>I can&#x27;t say I would really look forward to bringing this level of needless churn and constant disruption to the rest of my development toolchain. Anyway, Vite+ is really just wrapping existing tools into an abstracted command-line interface? And so I have more layers of indirection to wade through in order to get the thing to do what I want? So far I am not optimistic about this prospect...
    • jackdh2 hours ago
      I&#x27;ve followed all the main migrations and I&#x27;ve say they where really quite smooth, can&#x27;t remember having any major issues and each time it tended to be worth it.
    • bhouston1 hour ago
      &gt; Version 3 =&gt; 4 =&gt; 5 =&gt; 6 =&gt; 7 =&gt; 8.<p>I did the migrations and they were not horrible. A few breaking changes but they were relatively isolated. And the speed and improvements over these versions had been quite significant.
    • pier2544 minutes ago
      &gt; <i>It&#x27;s not as if it is dramatically better now than it was in version 3</i><p>Adding stuff for SSR was a major improvement.
    • c-hendricks1 hour ago
      Echoing another person, but we did all those major version migrations without any breakage &#x2F; churn. What were the breaks you ran into?
    • Tadpole91811 hour ago
      I went from 4 to 8 in a single step. I had to change 5 lines of config.<p>Can we please stop the <i>incessant</i> belly-aching over problems that don&#x27;t exist. I have to question if you even use these tools?
      • volkk1 hour ago
        also i&#x27;m pretty sure claude can one shot this these days. a non-issue.
    • rglover2 hours ago
      The churn <i>is</i> the product.
      • enraged_camel58 minutes ago
        This makes absolutely zero sense. If you&#x27;re going to post cynically, at least try to have some sort of coherent point?
        • rglover13 minutes ago
          Tooling instability creates the demand for more tooling.
  • ewy12 hours ago
    it worked for uv so i can imagine a competent team can do the same thing for javascript!
    • alexwebb22 hours ago
      Surprised to see this is the only uv reference in the comments!<p>Feels like an obvious comparison to me, and a very welcome development for the JS ecosystem.<p>uv made me actually _enjoy_ working in Python again.
      • seanclayton42 minutes ago
        a single tool was the enabler of enjoyment? It seems enjoyment is a fleeting thing these days if that&#x27;s the case
  • ivanjermakov4 hours ago
    Can it be used for Node builds or browser-only same as Vite?
    • tvbusy4 hours ago
      It uses Vite so the same limitations as Vite. However, I have been using Vite for my NestJS servers without any problem with `vite-plugin-node`. See example at <a href="https:&#x2F;&#x2F;github.com&#x2F;leosuncin&#x2F;nest-vite-example&#x2F;blob&#x2F;master&#x2F;vite.config.mts" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;leosuncin&#x2F;nest-vite-example&#x2F;blob&#x2F;master&#x2F;v...</a>
    • UnfitFootprint2 hours ago
      Here is my particular incantation for targeting node that is working very well: <a href="https:&#x2F;&#x2F;pastebin.com&#x2F;ynz4B5X0" rel="nofollow">https:&#x2F;&#x2F;pastebin.com&#x2F;ynz4B5X0</a><p>Essentially you pretend to be a library
    • TheAlexLichter4 hours ago
      I am using Vite+ for CLIs as well, yes. You don&#x27;t use Vite as dev server then but lint, format, task running and caching is still there!
      • silverwind1 hour ago
        I think tsdown is much better suited for CLI and library builds. Vite has many web-isms that don&#x27;t matter for these.
      • bdxn3 hours ago
        I&#x27;d be interested in seeing this implementation if it&#x27;s publicly available. Do you have a GitHub link? Thanks!
    • curtisblaine4 hours ago
      I&#x27;m always curious of the use case when someone proposes Node code bundling. What&#x27;s the advantage? Obfuscation in SEA?
      • afavour4 hours ago
        In my experience the bundling isn’t really the important aspect (though it also doesn’t harm anything), it’s more just having an ecosystem of plugins for code transpiling, static asset inclusion (e.g. text files) etc and a configuration format folks are already used to.
      • inbx02 hours ago
        For me, the main benefit is deployment bundle&#x2F;artifact size reduction. Mostly from dropping unneeded files from node_modules. Many packages include both esm and cjs builds, sources, docs, TS types, etc. stuff that you don’t need in prod. This matters for lambdas, for example, because deployed code size has limits there.
      • ivanjermakov4 hours ago
        Running typescript without compilation is still tricky with plain Node. `vite dev` has amazing DX not available for Node programs. I&#x27;m wondering if Vite+ tackles this problem.
        • curtisblaine4 hours ago
          Don&#x27;t we have `tsx` and `nodemon` (or the native Node reloader) for that? What are the DX gaps you see on the server side out of on-the-fly transpilation and reload on watch?
          • ivanjermakov3 hours ago
            Yes, I use tsx for Node programs. It&#x27;s not great when sharing the same codebase for both client and server code, they have completely different dev workflows.
          • afavour3 hours ago
            One advantage of precompilation is risk reduction. Say tsx gets hacked somehow (hardly unprecedented with Node modules!) you’ve got it running on your production server exposed to the internet. Precompilation on a CI pipeline is still a risk but a significantly lower one.
            • pjmlp3 hours ago
              If only the whole JavaScript wasn&#x27;t as dependency hell of single function packages....
          • Cthulhu_3 hours ago
            In theory, typescript doesn&#x27;t need to be transpiled, you can run ts files using `node --experimental-strip-types file.ts` as long as you don&#x27;t use any code that needs transpilation (like typescript enums).<p>Still need tsx to do type checking
            • ivanjermakov3 hours ago
              No, because of ESM import resolution rules. Typescript suggests extensionless imports, making it incompartible with ESM and therefore Node. Luckly, `node --import=tsx file.ts` handles imports well.<p>This is especially hairy when making a typescript library that is distributed non-compiled (without dist&#x2F;) and is supposed to run in both browser and Node.<p><a href="https:&#x2F;&#x2F;github.com&#x2F;nodejs&#x2F;node&#x2F;issues&#x2F;46006" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;nodejs&#x2F;node&#x2F;issues&#x2F;46006</a><p><a href="https:&#x2F;&#x2F;github.com&#x2F;microsoft&#x2F;TypeScript&#x2F;issues&#x2F;16577" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;microsoft&#x2F;TypeScript&#x2F;issues&#x2F;16577</a>
              • MrJohz2 hours ago
                You can use one of the following:<p>`allowImportingTsExtensions: true` (<a href="https:&#x2F;&#x2F;www.typescriptlang.org&#x2F;tsconfig&#x2F;#allowImportingTsExtensions" rel="nofollow">https:&#x2F;&#x2F;www.typescriptlang.org&#x2F;tsconfig&#x2F;#allowImportingTsExt...</a>, useful if you&#x27;re running `tsc` in noEmit mode as a linter)<p>`rewriteRelativeImportExtensions: true` (<a href="https:&#x2F;&#x2F;www.typescriptlang.org&#x2F;tsconfig&#x2F;#rewriteRelativeImportExtensions" rel="nofollow">https:&#x2F;&#x2F;www.typescriptlang.org&#x2F;tsconfig&#x2F;#rewriteRelativeImpo...</a>, useful if you&#x27;re using `tsc` to compile TS files to JS.<p>This allows you to use fully-specified imports in TypeScript files, which works basically everywhere — NodeJS, TypeScript, bundlers, etc.<p>The exceptions are browsers (obviously, only normal JS syntax there), and packages inside `node_modules`, which NodeJS will not do any type stripping for. So if you&#x27;re writing a library, you&#x27;ll probably still need to distribute the compiled sources, rather than distributing the raw TypeScript files alone. Or you use the JSDoc syntax for TypeScript, which can do everything that .ts files can do, but is more verbose and idiosyncratic.
              • moogly30 minutes ago
                I transpile for prod, but use --strip-types when running in dev, and all I had to do was to make a 10-line ESM register hook that rewrites .js to .ts if the .js import fails, and then a one-liner import register trampoline script. Not sure I&#x27;d do that in prod, but works fine in dev at least.<p>This way I could just use node --watch instead of tsx or nodemon.
          • curtisblaine3 hours ago
            @afavour if you need precompilation in CI can&#x27;t you simply use... tsc?
      • UnfitFootprint2 hours ago
        I’ve found if you want interop ts esm and js cjs you need to compile your code - and then `tsc` doesn’t bundle your dependencies for you and outputs incomplete code.
      • mnutt2 hours ago
        In cases where startup time matters and you have a slow disk, bundling can drastically reduce the number of filesystem calls you have to make for large dependency graphs.
  • colesantiago4 hours ago
    Is there a subscription with this?<p>I&#x27;m just wary about anything with a &#x27;+&#x27; and I assume there is a subscription attached to it.<p>Looking at this it doesn&#x27;t look like it.
    • gordonhart3 hours ago
      My first thought too. &quot;$name+&quot; is strongly coded now as &quot;subscription service for $name&quot;
      • TheCoreh3 hours ago
        Yeah, not only the name: they’re also going with various semiotic signs that are strongly associated with a subscription service, including their website design, choice of typography, and even the press release–style copy.<p>Looks like they have been acquired by Cloudflare, and pivoted to fully open source, but they haven’t really tweaked their messaging to make that fully land with unsuspecting visitors.<p>It’s kinda like the reverse situation of open source projects that switch to a source available license, but keep the aesthetics of an open source project. Kinda funny!
    • khurs4 hours ago
      Says:<p>&quot;It is fully open source under the MIT license&quot;
    • bouk3 hours ago
      I think that used to be the idea but then they got acqui-hired
    • dandaka3 hours ago
      Naming is worrisome!
  • dkdbejwi3832 hours ago
    Toolchain Grand Vitesse
  • donaldstuck2 hours ago
    Doug McIlroy once said: &quot;Make each program do one thing well&quot;.
    • CharlesW2 hours ago
      Then he&#x27;d love this. Like Unix, Vite+ is a collection of programs that do one thing well.
  • overflyer3 hours ago
    Layer on layer on layer on layer on layer.... Web development is just a meme by now
    • anon70003 hours ago
      This is just what modern languages have out of box. (Like rust and go.) it’s a true shame that web isn’t actually unified behind a type safe language with a single solid toolchain. It’s a huge pain to manage and I’m curious how much money it’s cost the industry. “Vite+” isn’t a true solution to that. There are many competing toolchains. And no default standardized one.
      • Quothling3 hours ago
        I&#x27;m not very familiar with Rust, but doesn&#x27;t cargo pull a lot of external dependencies for most projects? I really like how Go can do everything with just the standard library, but I wasn&#x27;t aware Rust was similar. For typescript we&#x27;ve moved our stuff to bun. It has it&#x27;s own risk management perspective compared to node, but at least it&#x27;s now possible to build web services without having to rely on a bunch of external dependencies. Which in our highly regulated business would require security policies for each dependency explaining the risks, why we accept them and how we mitigate them.
        • nicce2 hours ago
          &gt; without having to rely on a bunch of external dependencies. Which in our highly regulated business would require security policies for each dependency explaining the risks, why we accept them and how we mitigate them.<p>How about the dependencies Bun is pulling? How did you ever managed to pass security policies with Bun which has so many segfaults that nobody even bothers to write CVEs for them.
        • jjice2 hours ago
          Cargo itself doesn&#x27;t pull the dependencies, but yes to Rust&#x27;s standard library being much more lean than Go. Bring your own HTTP, text templating, and such, but core data structures are provided.<p>Go gives you a bunch of goodies in the standard library.<p>Rust provides things like your build system, testing, and package management all together, which is what I assume OP meant.
    • CharlesW2 hours ago
      Vite+ isn&#x27;t a layer, it&#x27;s &quot;just&quot; a high-performance suite of excellent tools that work well together to provide a great DX for developers.<p>Vite+ can improve and simplify what developers are <i>already</i> doing with ad-hoc collections of tools. Vite is already an industry standard, and Vite+ has a good chance of achieving that status as well.
    • oever3 hours ago
      Deze vuist op deze vuist. Deze vuist op deze vuist. Deze vuist op deze vuist. En zo klim ik naar boven.<p>You probably need to see a video or gif to get it.
      • hagbard_c2 hours ago
        Some barbarian without a grasp of the Dutch language knee-jerked the down-vote button so I&#x27;ll add a Swedish version which adds an important attribute.<p><pre><code> Imse vimse spindel klättra upp för trå&#x27;n. Ner faller regnet, spolar spindeln bort. Upp stiger solen, torkar bort allt regn. Imse vimse spindel klättrar upp igen. </code></pre> Here&#x27;s how to interpret this saga of the ever-climbing little spider in the context of web development. It climbs up its tread (klättra upp för trå&#x27;n) &#x27;cause that new framework will sure make catching those flies (clicks&#x2F;jobs&#x2F;likes&#x2F;whatevers) easier. And then the rain starts (the CVEs start piling up, the corrupted packages come flooding in) and the hapless spider gets thrown off its web (Pwned!) until the sun comes back and dries away the rain (a new framework, yay, this will solve all problems) upon which the spider climbs up its thread again.
    • bel83 hours ago
      It&#x27;s all great to leverage until something breaks in a middle layer and you can&#x27;t reproduce without submitting your entire project in the GitHub issue.
    • papichulo20233 hours ago
      Pretty much all software is built like that.
      • nicce2 hours ago
        I think web development does not need that many layers. Usually there is a clear purpose for each layer. I think most problems in web are self-created.
    • dimitrios13 hours ago
      Don&#x27;t be so negative nancy here!<p>I have been doing &quot;modern web&quot; things since essentially day zero (you kids with your fancy JIT compiled javascript interpreters!)<p>SvelteKit, and by extension, Vite, has been the single most productive webstack I have ever used. If this offers anything on top of that, I welcome it with open arms.<p>Far from being a meme!
      • dalmo32 hours ago
        vp + sv seems to work very well, when I tried it. And oxfmt supports svelte now too!
    • csomar2 hours ago
      Is everyone project so simple that it can fit in these &quot;vp check&quot; &#x2F; &quot;vp dev&quot; commands? Like even for my amateurish web app, I have a custom web server with a self-signed certificate with an &quot;&#x2F;etc&#x2F;hosts&quot; domain; and for checks I need to do custom checks for GraphQL and a couple of cloned NPM packages.
  • deadbabe2 hours ago
    It’s a great move for Cloudflare to have bought up voidzero.
  • noodletheworld2 hours ago
    I appreciate the effort to bring things together in this but…<p>&gt; Vite+ will manage your global Node.js runtime and package manager.<p>What? Why?<p>You’re really going all-in if you adopt this; and… for what? A bit of cozy tooling around existing standard ways of doing things?<p>Ok, sure; I like tools, like vite.<p>…but even for an opinionated tool, this is <i>extraordinarily</i> opinionated. Like next.js<p>Im skeptical.<p>The pitch of bringing things together seems strong, but did we go too far here?<p>Reading reviews of people using this didn&#x27;t really convince me.<p>It seems to be running on the coat tails of the vite name, rather than its own merit.
  • paulinho13 hours ago
    Im tried boss
  • incrudible4 hours ago
    I have removed vite because dev build and reload is noticable slower than just esbuild and browser refresh. Vite does nothing for me that an LLM can not just trivially rebuild in a bespoke manner.<p>YMMV
    • jml783 hours ago
      I am actually pushing our frontend devs to remove more and more dependencies and leverage LLMs to just write the code instead of all the dumbass packages in hellscape of supply chain attacks via node&#x2F;npm.
      • mrbombastic2 hours ago
        You are signing up for another hellscape of unmaintainable slop. Enable package cooldowns and only whitelist internal packages and you are better off than 90%
        • jml7848 minutes ago
          You act like the existing packages being published in this ecosystem aren’t already slop or quickly getting there.<p>We already do cooldowns and disable preinstall and postinstall scripts on all packages except for ones that actually require it.<p>I bet if you looked at 70% of your dependencies pulled in, you would be horrified. I would rather have that capabilities via code in my repos at this point.
    • curtisblaine3 hours ago
      How do you bundle web workers that import dependencies? iirc the issue in esbuild for that is still open and users are manually building their workers as separate entry points, which is very fragile.
  • jmull1 hour ago
    Vite pumps out major versions -- that is, breaking changes -- at an incredible rate.<p>I don&#x27;t want to be a vite upgrade engineer.<p>I&#x27;ll try to pass on this if I can.