News for hackers. Stuff that matters.
Re:Node v4.0.0 by dcwca on Tuesday September 08, 2015 @03:23PM (#10187665)
The io.js fork and subsequent merge back into Node.js, including the birth of the Node Foundation, has been one of the best examples of the power of open source I have ever seen in action.

The situation went from bad, to worse, to the best possible outcome, and that's remarkable to say the least.

Congratulations to everyone involved and thank you for the hard work.

Re:Node v4.0.0 by blowski on Tuesday September 08, 2015 @03:34PM (#10187720)
As somebody who uses Node only at the periphery of my role (for things like the Zombie browser, and SASS parsing) the massive instability has put me off from relying on it for anything core.

Documentation is quickly out of date, libraries seem to have incompatibilities which only become obvious when they don't work, there's no 'recommended' approach for even basic tasks.

I won't pretend I'm speaking for everyone, as clearly there are lots of people doing great things with Node. However, it doesn't seem to be a language like Ruby or Python where I would feel comfortable using it for a small but important project.

I'm always grateful to everyone who works on open source projects, but I wouldn't hold Node up as a great example of the open source community.

Re:Node v4.0.0 by dcwca on Tuesday September 08, 2015 @03:38PM (#10187752)
Instability is the very thing this merge and the foundation seek to address. Where there was once an uncertain future, there is now a Board of Directors and a Technical Steering Committee bound by a Open Governance Model.

The future has never looked more stable for Node, just take a peek at the names of the companies sitting on the board: https://nodejs.org/en/blog/announcements/foundation-elects-b...

Re:Node v4.0.0 by blowski on Tuesday September 08, 2015 @03:42PM (#10187780)
It promises a stable future, so let's say I'm being cautiously optimistic.
Re:Node v4.0.0 by grandalf on Tuesday September 08, 2015 @05:37PM (#10188352)
> It promises a stable future, so let's say I'm being cautiously optimistic.

This doesn't make sense in light of your initial comment. One of the big goals of IO was to move to semver and address unpredictability/instability that you describe.

If anything, the merging of Node and IO should give you confidence that project governance will be on the right track moving forward.

Also, when you consider the advancements in transpiled js, the js/node community is looking very wise compared with other language maintainers.

Re:Node v4.0.0 by radu_floricica on Wednesday September 09, 2015 @06:40AM (#10190677)
"On the right track" does not mean "production ready now". Some time needs to pass in order to create the confidence necessary.
Re:Node v4.0.0 by Killswitch on Wednesday September 09, 2015 @10:09AM (#10191518)
Tell that to the big companies who use it in production right now. Microsoft, Netflix, PayPal, Walmart.
Re:Node v4.0.0 by verbin217 on Wednesday September 09, 2015 @01:30PM (#10192757)
I suspect he means one-man-set-and-forget-production.
Re:Node v4.0.0 by grandalf on Wednesday September 09, 2015 @09:23AM (#10191243)
I lot of people (myself included) have been using IO.js in production for a while now.
Re:Node v4.0.0 by hexchain on Thursday September 10, 2015 @04:16AM (#10196738)
> One of the big goals of IO was to move to semver

And of course they failed right from the start. From semver.org: Version 1.0.0 defines the public API.

So their jumping to 4.0.0 from 0.x.x means they don't care to have a public API!

Re:Node v4.0.0 by kbutler on Thursday September 10, 2015 @12:37PM (#10199060)
I'm not sure you're not trolling, but in case you have serious concerns, node.js 4.0.0 incorporates the history of io.js. io.js defined 1.0.0 in early 2015.

See https://github.com/nodejs/node/blob/master/CHANGELOG.md and search for 1.0.0

Re:Node v4.0.0 by untog on Tuesday September 08, 2015 @03:49PM (#10187821)
I mean, Ruby was created in 1995, Python in 1991. Node was first released in 2009. That's not an entirely fair comparison since, of course, JavaScript was created long before Node, but Node introduced the language to a new environment, and a lot of complications needed (and in some cases, still need) to be sorted out.

As for no recommend approach - that's deliberate. I don't think most people working on Node want a Rails equivalent.

Re:Node v4.0.0 by dcwca on Tuesday September 08, 2015 @04:20PM (#10187994)
> As for no recommend approach - that's deliberate. I don't think most people working on Node want a Rails equivalent

This is a useful way to understand what Node is. Node's core API is for building any sort of network service: A DNS server, an SMTP server, HTTP server, socket listener, etc. and so it applies to a wide and varied set of problems. Rails is for building a very specific type of database-backed web application.

Re:Node v4.0.0 by pluma on Wednesday September 09, 2015 @05:23AM (#10190496)
Exactly. I don't think Node is a good fit for monolithic CRUD apps. These are already solved problems in various other languages. Instead Node lets you compose small purpose-built modules.
Re:Node v4.0.0 by techdragon on Wednesday September 09, 2015 @08:16AM (#10190926)
Now out only problem is how to build decoupled/distributed micro services.

I'd argue only Erlang and Elixir are going to survive into the multi core multi server future, but that would be little more than a slightly educated opinion unless I take the time to write a very large explanation with cited references. I don't have time for that this week.

Re:Node v4.0.0 by pluma on Thursday September 10, 2015 @06:21AM (#10197166)
Personally I prefer having a monolithic app at the core and using Node as the glue to tie everything together (e.g. to provide "real-time" features or to integrate third party services).

I think what's holding Erlang back is mostly its rather obscure syntax. Only a mother could love that.

Re:Node v4.0.0 by vkjv on Wednesday September 09, 2015 @10:14AM (#10191550)
We are an (almost) completely node.js team and are having quite a bit of success using it for microservices. gRPC makes communication fast and easy, while Docker and Kubernetes make deployment and composition just as simple.
Re:Node v4.0.0 by pfooti on Tuesday September 08, 2015 @05:27PM (#10188305)
I agree - I think I could get away with arguing that Ruby became popular because of Rails (that may not be completely true, but I and a lot of other devs I know learned about ruby because of rails at least). Node, OTOH, has no central framework that people learn of and then say, "oh, I have to learn node to use XYZ".

There are plenty of libraries that provide whatever level of support you want, but one big reason people seem to use Node is for the ease of the DIY process. Honestly, I don't need an all-in-one system, because my system has needs that aren't easily modeled in ActiveRecord (or at least weren't during Rails 3 days when I moved over to Node). Instead, I am doing mix-and-match with smaller libraries to help database access, realtime (websocket) services, OAUTH, and a trad REST backend.

I also think it's fair to compare the release of node and the release date of ruby or python - it was really only then that we can start talking about needing frameworks for building web applications that run in the javascript language, whereas the other two languages could have done so right away (or ... later, once the web application world became more than just a cgi gateway on top of a c++ stack, like the lunch menu randomizer I had running back in 1995). Still, no matter how you slice it, node and server-side javascript are still relatively new on the scene, and not necessarily well-suited for an all-in-wonder, highly-opinionated framework.

Re:Node v4.0.0 by AdieuToLogic on Wednesday September 09, 2015 @01:42AM (#10189903)
> ... Ruby was created in 1995, Python in 1991. Node was first released in 2009. That's not an entirely fair comparison since, of course, JavaScript was created long before Node, but Node introduced the language to a new environment...

Actually, no, it didn't. JavaScript was first introduced "on the server side" about 20 years ago in the Netscape web server[1].

  We learn from history that we learn nothing
  from history.

  George Bernard Shaw[2]
1 - http://docs.oracle.com/cd/E19957-01/816-6411-10/getstart.htm

2 - http://www.wisdomquotes.com/quote/george-bernard-shaw-19.htm...

Re:Node v4.0.0 by pluma on Wednesday September 09, 2015 @05:18AM (#10190488)
The JS of 2009 was an entirely different language from the JS Netscape originally created. Plus Netscape's web server was an evolutionary dead end and a proprietary closed-source product.

Node was in part influenced by CommonJS, which tried to unify the various competing but relatively obscure (mostly non-browser) JS environments. To say that it learned nothing from the history of SSJS (or JS environments in general) is, frankly, wrong.

That said, Netscape's SSJS is entirely unrelated to Node or anything like it[0]. Node lets you write application servers, Netscape's SSJS effectively was more like Rhino-meets-JSP or maybe GWT (i.e. the heavy lifting was apparently implemented in Java, not JS).

[0]: http://docs.oracle.com/cd/E19957-01/816-6411-10/jsserv.htm

Re:Node v4.0.0 by AdieuToLogic on Thursday September 10, 2015 @12:34AM (#10196161)
With utmost respect, I respond to each point you mention below.

  The JS of 2009 was an entirely different language
  from the JS Netscape originally created. Plus
  Netscape's web server was an evolutionary dead end
  and a proprietary closed-source product.
The reason I cited Netscape's server was to unequivocally show that NodeJS did not introduce JavaScript to "a new environment" as the GP stated. Why previous efforts failed to gain traction or if it is even a good idea to use JavaScript to define server-side logic is left as an exercise to the reader.

  Node was in part influenced by CommonJS, which
  tried to unify the various competing but
  relatively obscure (mostly non-browser) JS
  environments. To say that it learned nothing
  from the history of SSJS (or JS environments
  in general) is, frankly, wrong.
It would seem we have differing perspectives of history. CommonJS was started in 2009[1], the same year as NodeJS[2]. The lessons of history I implied regarded attempts to use JavaScript as a server-side solution over the past 20-ish years. While you make the distinction:

  Node lets you write application servers,
  Netscape's SSJS effectively was more like
  Rhino-meets-JSP or maybe GWT (i.e. the heavy
  lifting was apparently implemented in Java,
  not JS).
I suggest that this is irrelevant, as the details of how the JavaScript logic is executed is orthogonal from the fact that systems such as these use JavaScript to define behaviour itself. The fact remains that there have been more than one previous project/offering/effort which had JavaScript as a key component. IMHO, it behooves interested parties to do whatever postmortem examinations possible before committing to the same or significantly similar path.

1 - https://en.wikipedia.org/wiki/CommonJS

2 - https://en.wikipedia.org/wiki/Node.js

Re:Node v4.0.0 by pluma on Thursday September 10, 2015 @06:46AM (#10197240)
I don't think how Netscape's SSJS worked is irrelevant at all. There is a huge difference[0] between Node as a JS environment for writing applications and Netscape's SSJS as an environment for writing "server pages".

Node is for writing small standalone services. Netscape's SSJS was for creating dynamic web pages -- just like CGI scripts or (at the time) PHP.

SSJS may be considered prior art for "JS on the server" but it's barely recognizable. As far as I can tell the execution was entirely synchronous; but Node is defined by its evented -- and therefore asynchronous -- I/O. It's a data point for comparison but it's not a good lesson to learn from, other than what not to do.

A lot of the shortcomings of Node come from the limitations of JS at the time. Callbacks and streams (arguably two of the biggest issues with Node) are a result of Node being asynchronous. At the time, event listeners and callbacks were the best tool JS offered and the best thing the JS community had.

I can only imagine you're trying to say that Node should have taken more inspiration from other languages that solve problems better (like gradual typing, or the Maybe monad or the actor model). But none of this has anything to do with Netscape's SSJS.

You explicitly point out Netscape's SSJS as a part of history Node should have learned from. What specifically do you think Node should have learned from it? Are you just trying to say "SSJS is a bad idea (because Netscape's SSJS was bad) and shouldn't have been attempted again, even in an entirely different way"?

[0]: http://stackoverflow.com/questions/18350910/netscape-enterpr...

Re:Node v4.0.0 by stdbrouw on Wednesday September 09, 2015 @07:17AM (#10190760)
Sure, and after that we had Rhino and Adobe has been using JavaScript for a very long time as a scripting language (ExtendScript) and there are probably many other examples of JavaScript outside of a browser. But I don't see what that has to do with untog's main point.
Re:Node v4.0.0 by AdieuToLogic on Thursday September 10, 2015 @12:36AM (#10196167)
I saw "untog"'s post as having two points, to which I responded to the former. You identify the latter point as being the main one and that's perfectly fine.

Just different importance discerned from the same post IMHO.

Re:Node v4.0.0 by benihana on Wednesday September 09, 2015 @07:17AM (#10190762)
How long have you been waiting to use this pedantic comment and the obnoxious condescending quote about it to prove someone wrong and make yourself feel smart?

This has nothing to do with the parent comment about node deliberately differing from rails, it's typical hn/reddit pedantry.

Re:Node v4.0.0 by orangebread on Wednesday September 09, 2015 @07:26AM (#10190779)
Living up to his username.
Re:Node v4.0.0 by blowski on Tuesday September 08, 2015 @03:55PM (#10187855)
I believe that Node can and will become more stable. It feels like it has too much momentum not to. But until it does achieve stability, it's difficult to use it for anything serious without investing a lot of time into it.

Perhaps Go is a better comparison than Ruby and Python.

Re:Node v4.0.0 by weddpros on Tuesday September 08, 2015 @04:18PM (#10187984)
in fact, to my surprise, I've just tested our app (v0.10.x in production) on v4.0.0 and all our unit tests pass, the server works...

I'm amazed. A single module had to be bumped (Elasticsearch@8) while we directly rely on 50+ third party modules... Our npm-shrinkwrap is 2600 lines long.

That's not really a sign of instability to me, but rather great work

Re:Node v4.0.0 by TheHydroImpulse on Tuesday September 08, 2015 @04:43PM (#10188114)
Most of the instability is related to compiled modules. Hopefully they'll be updated to support v4.0.0 shortly.
Re:Node v4.0.0 by weddpros on Wednesday September 09, 2015 @01:17AM (#10189826)
mongodb and redis are two compiled modules and we didn't have problems with those. Honestly, there may be others, I don't even know!

We try hard to keep our dependencies up to date to limit the risks of an upgrade. We progressively apply dependencies updates to dev->staging->sandbox->production environments.

Was I worried when node.js forked? sure! but the situation is much better now. I think node.js can move forward smoothly now.

Re:Node v4.0.0 by blowski on Tuesday September 08, 2015 @04:26PM (#10188029)
You seemingly have much more experience with Node than me. Perhaps my amateur anecdotes are just bad luck, but certainly my Bash scripts that talk to Node break frequently.
Re:Node v4.0.0 by morgante on Tuesday September 08, 2015 @06:51PM (#10188655)
Bash scripts talking to Node sounds like a recipe for disaster.
Re:Node v4.0.0 by mbrock on Wednesday September 09, 2015 @03:58AM (#10190289)
Why?
Re:Node v4.0.0 by eyko on Wednesday September 09, 2015 @08:33AM (#10191016)
Please explain.
Re:Node v4.0.0 by weddpros on Wednesday September 09, 2015 @01:27AM (#10189856)
I think the npm project should document best practices, like when to use "*" version, when to use npm-shrinkwrap, etc... to limit problems.

NPM is a very powerful tool. In fact, it's our deploy tool: we run `npm install` on servers (private Sinopia npm repository) to deploy. But to do that, you must follow many many rules that are written nowhere.

Re:Node v4.0.0 by vkjv on Wednesday September 09, 2015 @10:18AM (#10191569)
We used to do this and it caused a lot of issues. Shrinkwrap is a must to keep versions stable. NPM and network unreliability can cause failed installs, as well as other issues.

Our first major improvement to this work flow was a tar of the app with all of the dependencies coupled with `npm rebuild` after unpacking. This worked quite well.

However, recently, we have switched to using Docker to generated this sealed packages which is working great.

Re:Node v4.0.0 by weddpros on Wednesday September 09, 2015 @11:12AM (#10191915)
We've never really had a problem... Our sinopia npm server is probably isolating some network problems, plus we don't start/update servers that often.

Our NPM workflow also ensures builds are easy to replicate. Most problems in development occur because of obsolete versions of some packages (our apps contain many private modules)... Clean npm-installs shields us from that in production.

Re:Node v4.0.0 by untog on Tuesday September 08, 2015 @04:08PM (#10187932)
it's difficult to use it for anything serious without investing a lot of time into it.

Isn't that true for many platforms?

Either way, I have multiple apps running Node in production, and I've never had the issues described. You don't have to be as breakneck as Node itself - some things I have are still running v0.10x just fine.

Re:Node v4.0.0 by twblalock on Tuesday September 08, 2015 @05:34PM (#10188336)
I use Java/Spring, Ruby, and Node.js in production, and Node.js is by far the hardest to stay up to date with without introducing major problems. The only framework I have used that is harder to update is Finagle.

It's not just Node itself to blame. There seems to be a culture of breaking things in the Node.js ecosystem. Breaking changes in third-party libraries are common. I have to specify exact dependency versions in my package.json, and almost every time I update one of them, something goes wrong.

Re:Node v4.0.0 by vectorpush on Tuesday September 08, 2015 @07:53PM (#10188878)
In my experience, Ruby (particularly rubygems) is quite a pain in the ass with regard to package upgrades, especially when the previous developer/ops has leveraged rvm to install multiple combinations of ruby/gem versions. I can't tell you how many times I've had to trace down problems in a project because a single gem fails to upgrade/pull/compile/resolve on 2 out of 4 machines even though the project has an identical gemfile and available ruby version on every server.

I contrast this with node/npm where my projects seem to behave identically across deployments (and in some cases, when in a bind, I've even been able to simply tar & scp the project src and have it run without further effort beyond installing node, something I've never been able to do with ruby).

Re:Node v4.0.0 by boundlessdreamz on Wednesday September 09, 2015 @02:19AM (#10190001)
Identical Gemfile.lock and same OS? Then you shouldn't be having any problems. What kind of errors were you getting?
Re:Node v4.0.0 by untog on Tuesday September 08, 2015 @06:12PM (#10188496)
have to specify exact dependency versions in my package.json, and almost every time I update one of them, something goes wrong.

That's where semantic versioning comes in. Most libraries follow it - if the major version number changes, it's a breaking change. If it doesn't, you're safe to upgrade.

Re:Node v4.0.0 by Touche on Tuesday September 08, 2015 @08:39PM (#10189014)
Semantic version doesn't solve compatibility problems, it just makes it more transparent. In some ways semver encourages breaking changes that otherwise might be avoided because, how, a major version bump gives you sufficient warning.

There are some major libraries that are on version 15 or greater... there's nothing good from a user's perspective about having a library they use do a major breaking release every other month.

What's worse is many libraries take advantage of "it's the wild west until 1.0" rule in semver and simple never release a 1.0.

Re:Node v4.0.0 by blowski on Tuesday September 08, 2015 @04:46PM (#10188134)
> Isn't that true for many platforms?

I would say that the ROI is lower for time spent learning Node. I've found that with all the other languages I've learnt, in a couple of days I've been able to build something useful, leave it running in production and reuse skills learned a year later.

With Node, even the name of the language is not stable! A few weeks back I went to install Zombie, and now I have to install iojs and not Node. Assumedly it's now Node again. If you live and breathe the language, subscribe to the mailing lists, go to the meetups, etc, these things might be obvious. But when you're just dipping in and out, it really dents your confidence in the language.

Re:Node v4.0.0 by nilliams on Tuesday September 08, 2015 @05:22PM (#10188275)
Your latter paragraph seems a bit fuddy as people 'just dipping in and out' would never have to have contended with the iojs 'name' any more than Python/Ruby/PHP people have to switch to a different VM every time one is announced (e.g. PyPy/Rubinius/Hack).

I'd agree with your first paragraph in that Node is a bit lower-level out of the box and probably takes more effort to get started building a web-app, but I think the time invested jumping in at that low-level is actually useful vs diving in at a higher 'framework level' with some of the other popular web languages.

Also it does have superior installer/package-manager/deployment stories compared to say ... Python & Django, which does have an impact on ROI.

Re:Node v4.0.0 by blowski on Tuesday September 08, 2015 @05:57PM (#10188429)
> Your latter paragraph seems a bit fuddy as people 'just dipping in and out' would never have to have contended with the iojs 'name' any more than Python/Ruby/PHP people have to switch to a different VM every time one is announced (e.g. PyPy/Rubinius/Hack).

One of my main use cases for Node is Zombie, and that required io.js after v3. No mainstream PHP, Ruby or Python application has required a different interpreter.

Re:Node v4.0.0 by mmebane on Tuesday September 08, 2015 @08:39PM (#10189015)
The io.js situation was more akin to Python 3 vs Python 2 than Python vs PyPy. It might not have looked like a major difference at first glance, but there were notable significant, which came with some breaking under-the-hood changes.
Re:Node v4.0.0 by hcon on Tuesday September 08, 2015 @06:10PM (#10188480)
Sounds to me like your issue is with the author of Zombie.
Re:Node v4.0.0 by Touche on Tuesday September 08, 2015 @10:36PM (#10189366)
Actually it's with jsdom, Zombie's major dependency which dropped Node support pretty soon after IOjs was released.
Re:Node v4.0.0 by WalterSear on Wednesday September 09, 2015 @12:57AM (#10189770)
That sounds political, more than anything else.
Re:Node v4.0.0 by thechriswalker on Wednesday September 09, 2015 @10:02AM (#10191476)
Actually, IIRC it's the exact same reason as the io.js split. The maintainer of jsdom had changes that weren't being merged into node's VM module.

So jsdom 3.x used a lib called "contextify". When io.js was released and the changes included, node support was dropped. Now node 4.0.0 is out and has those changes, jsdom now works on node again.

Re:Node v4.0.0 by lfuller on Wednesday September 09, 2015 @03:52PM (#10194027)
It was. The maintainer of jsdom decided to no longer support node after 3.x and made the library throw a condescending exception if you tried to run it with node. The docs were also filled with childish "tm" symbols whenever node was mentioned.

I see things like this all the time and it really puts me off OSS.

Re:Node v4.0.0 by aikah on Tuesday September 08, 2015 @04:51PM (#10188152)
> I don't think most people working on Node want a Rails equivalent

It wouldn't really be possible anyway. Async programming is hard and the shortcuts one can take with synchronous Ruby are impossible with Async Javascript. Nodejs has a "fibers" lib though , but it doesn't look like it is widely popular, but AFAIK it is the only to truly abstract async programming.

Re:Node v4.0.0 by ivank on Tuesday September 08, 2015 @07:39PM (#10188831)
Try bluebird's Promise.coroutine, I use it everywhere and it works great.

https://github.com/petkaantonov/bluebird/blob/master/API.md#...

Re:Node v4.0.0 by Dashron on Tuesday September 08, 2015 @11:11PM (#10189457)
Or if you want to use native promises, I threw this together

https://github.com/Dashron/roads-coroutine

Re:Node v4.0.0 by girvo on Tuesday September 08, 2015 @07:38PM (#10188827)
ECMAScript 7 has brought true async/await into the language, which currently works in Babel on top of Promises. As far as a regular user is concerned, define a function as "async" and then "await" on the result you're after inside of it. Hardly difficult, in my opinion!
Re:Node v4.0.0 by spankalee on Tuesday September 08, 2015 @08:09PM (#10188922)
async/await is nice syntax, but it doesn't change the fundamental difference between synchronous and asynchronous code and the viral nature of async functions. Sync functions cannot properly compose async functions in general.

A great essay on this is "What Color is Your Function": http://journal.stuffwithstuff.com/2015/02/01/what-color-is-y...

Re:Node v4.0.0 by danneu on Tuesday September 08, 2015 @06:56PM (#10188672)
Using abstractions like http://koajs.com/ and https://github.com/tj/co make Node code feel like every other language.

    var user;
    try {
      user = yield db.insertUser('foo')
    } catch(err) {
      if (err.code === '23505') {
        this.flash['error'] = 'Username taken';
        this.redirect('/register');
        return;
      }
      throw err;
    }
Re:Node v4.0.0 by aikah on Tuesday September 08, 2015 @10:06PM (#10189274)
no because you can't write a library which apis are thunks. And your code needs to run in a generator, something you omitted. Fibers are a better alternative , no need for yield and generators everywhere.
Re:Node v4.0.0 by danneu on Wednesday September 09, 2015 @12:25PM (#10192356)
Well, I was earnestly sharing run-of-the-mill Koa code since you made async abstractions sound elusive. Didn't realize you just had an agenda.

The thing is that people are actually using Koa/co to solve this problem. I've yet to see someone use fibers as their core webapp control flow abstraction.

Re:Node v4.0.0 by aikah on Wednesday September 09, 2015 @12:54PM (#10192552)
What agenda do I have ? I have none, I'm just saying using generators do not abstract async calls. The only way to do that is by using fibers. I'm not pushing for anything, i'm just saying that something like rails couldn't be written in nodejs , (and no sails , is nothing like rails in terms of complexity ).
Re:Node v4.0.0 by danneu on Wednesday September 09, 2015 @09:54PM (#10195787)
It's your fiber agenda. My mother used it to try to make me eat my brussels sprouts and I thwarted that, too.
Re:Node v4.0.0 by TheAceOfHearts on Wednesday September 09, 2015 @06:42AM (#10190680)
With async functions you interface with everything using promises, it's great.
Re:Node v4.0.0 by sparaker on Wednesday September 09, 2015 @11:49PM (#10196067)
There is http://sailsjs.org/ for people who want a Rails equivalent.
Re:Node v4.0.0 by sanderjd on Tuesday September 08, 2015 @04:06PM (#10187919)
I think there are two separate things in your comment: the recent instability is due to the leadership power struggle that has been resolved, but the "no recommended approach" problem is more the result of a philosophy that encourages tiny pieces, new ideas, and reinvention, which is both a blessing and a curse, and seems unlikely to change.
Re:Node v4.0.0 by blowski on Tuesday September 08, 2015 @04:23PM (#10188016)
You can have both. An 'officially recommended approach' does not preclude 1000 unofficial but working approaches. However, it does it make it a lot easier for someone dipping their toes in.

With Node for core and basic problems, I find myself thinking "Should I follow this blog post written by a highly respected developer but which is a year old and therefore forever in Node-land, or this blog post written last week by a nobody?". I don't like thinking that way about production code I'm writing for clients, so I use languages where I don't have to think that way.

Re:Node v4.0.0 by dcwca on Tuesday September 08, 2015 @04:31PM (#10188056)
When you say languages, do you really mean frameworks? It seems like languages are fairly general purpose and don't go out of their way to tell you how to build your application. Node is more in the "language" camp than the "framework" camp, and there are bunch of frameworks on top of it that give you the structure you're looking for.
Re:Node v4.0.0 by blowski on Tuesday September 08, 2015 @04:37PM (#10188087)
Anything. I'm a pragmatic developer who just wants solutions that help me pay the bills. It's precisely for that reason that Node has been a problem for me - it's caused much more than its fair share of headaches, when compared to Ruby, Python, PHP, Bash, Go.

Perhaps using a framework would make things easier, but I'm reticent to rely on it in the main part of the project when it causes so many problems just in the small parts.

Re:Node v4.0.0 by nilliams on Tuesday September 08, 2015 @05:27PM (#10188303)
Can you give an actual example of the 'so many problems' you describe?

Your previous comments address the paradox-of-choice idea, but the uncontroversial path in Node is to 'just use Express' right? How it that a worse situation than in other languages where there are also trendy frameworks competing against the default option. You name PHP as a better situation but from what I gather PHP is even worse at casting off legacy frameworks. Laravel is the new trendy, whereas it was CodeIgniter/Symphony before that and EE/Wordpress before that. And in Ruby, there's similar competition over an alternative to Rails [0].

[0] https://blog.engineyard.com/2015/life-beyond-rails-brief-loo...

Re:Node v4.0.0 by blowski on Tuesday September 08, 2015 @05:47PM (#10188389)
Sure. There was the decision a couple of years back to stop using self signed certificates. I spent a couple of hours wondering why a server I was running that compiled SASS on deployment suddenly stopped working, and it turned out to have been this.

A more recent example comes from Zombie, which I use for functional testing. When they moved to v3, they required io.js instead of Node. So eventually I decided to go with Zombie 3 and moved to io.js, but then another library broke which required Node instead of io.js.

They're the two big ones that stand out, but there have been lots of other small annoyances.

Re:Node v4.0.0 by brazzledazzle on Tuesday September 08, 2015 @06:16PM (#10188506)
I don't have a dog in this fight but the certificate thing sounds a lot like they corrected a significant security issue rather than API instability.
Re:Node v4.0.0 by blowski on Tuesday September 08, 2015 @06:22PM (#10188533)
True enough, but they didn't tell anyone they'd done it for hours after they pushed out the changes. A notice on the terminal after the update should have been possible, or at least a big message on the homepage. But nothing - only an angry GitHub issues queue with random suggested causes and fixes.
Re:Node v4.0.0 by mikekchar on Tuesday September 08, 2015 @08:41PM (#10189025)
In our shop we actually use all of Ruby, Node, Go, Python and Bash (in about that order of code volume). Honestly, for instability of 3rd party libraries Node is pretty bad, but Ruby is not really far behind. I am sure that I have spent more time debugging other people's code in Ruby than in Javascript.

Having said that the IO split has been a royal PITA. We got pegged to Node 10.x because JSDom only supports IO and Jest (which is what we wanted JSDom for) only supports Node :-P. I've been waiting a year for it to get cleared up.

It sounds like we made the right choice, though, because in this thread the people who are complaining about Node seem to be the ones who tried switching back and forth between IO and Node. There is actually only one bug in Node that has impacted me (related to the way connections are shut down) and it isn't fixed yet in master so not upgrading hasn't really impacted us. We just have to live without some of the ES6 features.

Personally, I'm a big fan of Go (old C++ programmer). We started using it a little over 2 years ago. The language definition has changed in that time, so I wouldn't call it stable ;-) The core libraries are rock solid, though. We barely use any 3rd party libraries (I think we use 2) so it's not really fair to compare that with other languages.

Although we have a fair amount of python in our shop, I don't seem to work on those projects very much (a month here and there). I can't say too much about it other than our Python code breaks due to 3rd party libraries more often than any of our other code. However, I think this is probably due to injudicious choices for our 3rd party libraries ;-)

Overall, I would say that my experiences don't match yours, but I wonder if it's because we never tried moving to IO.

Re:Node v4.0.0 by notNow on Tuesday September 08, 2015 @05:33PM (#10188334)
Software development is not about chasing the latest shiny fad or trend on the market, it's about solving real-world problems by researching available solutions. So, if you think that Node doesn't fit or not equipped enough to solve your problems, you're welcome to check other solutions till you find the one most suitable to the problem at hand.

So, if you think that Ruby or Python could get things done for you and you're very familiar with them, go for either and get it done but to pick on Node just because you don't quite grasp its inner workings is really odd of you and the whole reasoning behind your critique is rather absurd.

Re:Node v4.0.0 by blowski on Tuesday September 08, 2015 @06:08PM (#10188469)
It's not absurd to say "I'd like to use Node because of its performance and because it's easier to hire for, but only if it were more stable and had better documentation". As somebody who has to consider trade-offs between short-term and long-term costs for clients, these are very real problems for me.
Re:Node v4.0.0 by Touche on Wednesday September 09, 2015 @12:48PM (#10192518)
Node's documentation really is terrible. The fact that it doesn't show what arguments functions take, what types are expected, etc. is pretty sad in 2015. The documentation is barely better than your typical side-project readme.md file, at best you get 1 example of an api's usage (always the most basic use-case only, of course).
Re:Node v4.0.0 by drumdance on Wednesday September 09, 2015 @12:16AM (#10189643)
Preach. I inherited a Node project for which Rails was a much better solution for our use case. It's been fun learning a new platform, but for our needs Rails would have been fine. The only conceivable reason I can see they chose Node is because it's cool.
Re:Node v4.0.0 by hyperpallium on Tuesday September 08, 2015 @06:19PM (#10188517)
Doesn't preclude them, but doesn't encourage them, which was the philosophy. An officially blessed approach would deprive alternatives of oxygen (though to be fair, it might also enlarge the pie, by attracting extra developers like yourself).

The flexible experimental approach inevitably conflicts with the constraint of back-compatibility (e.g. of x86, java).

Node seems more like the Drosophilia-like JS frameworks.

Re:Node v4.0.0 by dcwca on Tuesday September 08, 2015 @04:45PM (#10188129)
I can't reply to the grand-child of this post, so here's my reply.

It seems that you don't like Node and are intent not to use it. I respect that and am not trying to push it. I think asynchronous programming in the reactor pattern is a good solution pattern for many types of problems, and Node.js is a solid application of that pattern. But it certainly is more complicated than synchronous programming in the kinds of environments you listed.

I do wonder however what compels you to shit all over a thread celebrating a project milestone with an opinion that comes from an admitted lack of knowledge.

Re:Node v4.0.0 by blowski on Tuesday September 08, 2015 @04:52PM (#10188157)
I'm not 'shitting all over Node'. I do use it for certain applications, and would love to use it more because it is a fantastic solution for some problems. As a back-end for websockets it's in a league of its own, and 'Isomorphic JavaScript' is very exciting if you ever need to hire developers.

I am using this discussion as a means of saying "here's what I think Node needs to get more people using it in production". My opinion is that they need to do more work on stability of the API, and improve documentation, to win over us enterprise types who value long-term stability over short-term features.

Re:Node v4.0.0 by sanderjd on Tuesday September 08, 2015 @07:09PM (#10188727)
Just because I think you'll find this useful (and not because I want to denigrate Node, which I think is great tech, especially with the upgrades in this announcement), have you seen Phoenix[0]? Despite immaturity, I think it is already close to being in Node's league as a back-end for websockets, but seems to have a philosophy you may enjoy more. That is, it reminds me a lot more of Rails and Django than anything in Node. (I also think Elixir is awesome to work with, but that's somewhat beside the point.)

[0]: http://www.phoenixframework.org/

Re:Node v4.0.0 by Gigablah on Wednesday September 09, 2015 @04:31AM (#10190374)
This is an announcement about the Node open source community finally overcoming their differences and making strides towards platform stability, yet your first response is to complain about "massive instability" (which turns out to be more about individual libraries than the platform itself) and how you "wouldn't hold Node up as a great example of the open source community". I can't see this as anything more than a slap in the face.

My opinion? You probably should withhold your judgement of the "open source community" if you only have superficial knowledge about their efforts.

Re:Node v4.0.0 by coldtea on Tuesday September 08, 2015 @05:29PM (#10188315)
>I think asynchronous programming in the reactor pattern is a good solution pattern for many types of problems, and Node.js is a solid application of that pattern.

Asynchronous programming a la Node (with callbacks etc) is an anti-pattern.

We've had better ways to handle that for 4 decades now.

Re:Node v4.0.0 by nocman on Tuesday September 08, 2015 @06:26PM (#10188548)
For the benefit of any who are not sure what you are talking about, could you please elaborate on what some of these "better ways to handle that" are?

It would make your comment much more helpful, IMHO.

Re:Node v4.0.0 by AdieuToLogic on Wednesday September 09, 2015 @01:08AM (#10189799)
> For the benefit of any who are not sure what you are talking about, could you please elaborate on what some of these "better ways to handle that" are?

While I am not certain what the GP specifically references, I can say that about 40 years ago the Actor model[1] was officially documented. The literature documenting benefits of an Actor model over a callback approach are easily found. For understanding the pain which callback-based systems often produce, a person can familiarize themselves with the Win32 API (disclaimer: this is a masochistic exercise not recommended for anyone).

1 - https://www.cypherpunks.to/erights/history/actors/AIM-410.pd...

Re:Node v4.0.0 by pdpi on Wednesday September 09, 2015 @04:04AM (#10190305)
Even if you don't go the actor route, if you're going to use continuation passing style as much as Node wants you to, having a language with better CPS support would be much nicer
Re:Node v4.0.0 by spankalee on Tuesday September 08, 2015 @08:16PM (#10188947)
Blocking threads.

People associate threads with shared-memory concurrency, which can be really hard to deal with, but shared heaps are not the important part - blocking is.

Blocking threads means that all your functions can call each other, all control flow constructs just work, and debugging is sane. With blocking threads functions don't need to belong to a special class of async functions that in general need to be called from other async functions.

It would have been great if node invested in allowing many concurrent blocking JS threads. To see what that could have looked like, see Dart's Fletch project: https://github.com/dart-lang/fletch

Re:Node v4.0.0 by spion on Tuesday September 08, 2015 @09:37PM (#10189195)
Now that we have ES6 generators, this is much less of an issue.
Re:Node v4.0.0 by spankalee on Tuesday September 08, 2015 @10:46PM (#10189401)
Generators don't help with the sync/async split.

Generators are just iterators, and are synchronous. The consumer asks for a value with next() and the value must be computable (even if that value is a Promise).

If you have an async function (one that returns a Promise or in the future a Stream), and you need to call it from a sync function, and somehow incorporate the future value into the return value of the sync function, you're stuck. You have to async-ify your functions all the way up the call chain.

With blocking this isn't a problem. We just need environments that make blocking cheap.

Re:Node v4.0.0 by spion on Wednesday September 09, 2015 @05:54AM (#10190565)
In my experience in practice there is no big difference, really, its just a matter of a few keywords.

As for "having to change an entire call stack", that just stopped happening after a while. The rule of thumb was that if the function is impure (e.g. relying on mutable state) then it will likely become async, too. That lets me plan ahead.

Re:Node v4.0.0 by coldtea on Wednesday September 09, 2015 @05:31AM (#10190512)
Anything other: blocking in an Erlang like system, actors, CSP, real continuations, async/await, etc.
Re:Node v4.0.0 by sanderjd on Wednesday September 09, 2015 @11:07AM (#10191888)
What are the differences between what you reference as "actors" and "CSP"?
Re:Node v4.0.0 by collyw on Tuesday September 08, 2015 @04:05PM (#10187912)
As a back end Python / Perl dev, everything in JavaScript seems this way to me.
Re:Node v4.0.0 by balls187 on Tuesday September 08, 2015 @06:22PM (#10188534)
> the massive instability has put me off from relying on it for anything core.

Documentation is quickly out of date, libraries seem to have incompatibilities which only become obvious when they don't work, there's no 'recommended' approach for even basic tasks.

--

Do you have examples? My counter to your anecdotal evidence is my own--we've successfully built and managed multiple projects in production, that service millions of customers, which were written in nodejs, and have been doing so since 2013. The issues with Io led to no discernible conflicts to our businesses.

Re:Node v4.0.0 by blowski on Tuesday September 08, 2015 @06:27PM (#10188556)
I agree that it's possible to build successful Node apps, but of all the languages I use, it's the most difficult to keep up to date with and most likely to cause problems.

If you're reading the mailing lists, going to meetups, etc, these things might not seem like huge issues. But if you're just trying to run a small Node project as one amongst many bits of software in many languages, Node causes a disproportionate number of problems.

I've given a couple of examples below - Zombie switching to io.js, and the whole self-signed certificate debacle from a couple of years ago.

Re:Node v4.0.0 by hugozap on Tuesday September 08, 2015 @04:03PM (#10187900)
The Node ecosystem is a great example of the open source community. The large number of libraries released on npm, active participation of the community and frequent events around the world related to Node proves it. Besides of course the large list of companies using it.

Not sure about your problems with node and the 'massive instability'issues you've had, or if they are related to a third party library and not the Node core.

Re:Node v4.0.0 by blowski on Tuesday September 08, 2015 @04:31PM (#10188058)
I meant stability not in the sense of 'frequently crashing', in the sense of the API and 'how things work' remaining the same over time.
Re:Node v4.0.0 by notNow on Tuesday September 08, 2015 @05:23PM (#10188288)
It's 0.x.x for a reason, don't you think?

The leading 0 denotes probable instability in the API that devs are willing to take the risk for and act upon.

You're familiar with SemVer, aren't you?

Re:Node v4.0.0 by iends on Tuesday September 08, 2015 @07:26PM (#10188788)
Node.js has never followed SemVer. That's why when io.js forked they adopted 1.0.0 and now Node.js went from 0.12.x to 4.0.0...
Re:Node v4.0.0 by ap22213 on Tuesday September 08, 2015 @09:01PM (#10189091)
Geez, that's a bit harsh, don't you think? I've used node on several high-volume production apps, and I haven't seen any instability. And, if the documentation is poor, then it's only poor forsomuch as one unwilling to delve into the code.

Node has its place, and it's not for everything, but for quickly whipping together sturdy, flexible web APIs, it's great.

Re:Node v4.0.0 by _greim_ on Tuesday September 08, 2015 @10:37PM (#10189367)
> I've used node on several high-volume production apps, and I haven't seen any instability.

Not sure if this is what you meant, but I read the ancestor comment not as being about "will the process crash randomly?" but "will an upgrade break something in my app?"

It's just that I've seen whole comment threads go by with people tripping over this misunderstanding without ever acknowledging it.

Re:Node v4.0.0 by ap22213 on Tuesday September 08, 2015 @11:28PM (#10189511)
Makes sense, on a rereading.

npm coupled with drastically and frequently changing libraries (and transitive dependency clashes) does make a hell of a dependency mess; I agree.

But, on the plus side, most node libraries are easy to modify. In fact, I have a private repository full of github forks that I've had to make over the years (and not had the time or patience to submit pull requests). Luckily, npm supports private repos easily.

Re:Node v4.0.0 by mattkrea on Tuesday September 08, 2015 @08:45PM (#10189044)
Do you have an example of the out of date documentation? The Node.js built-in modules have remained largely unchanged (as far as my use goes) since around 0.6.0 if not earlier. Streams underwent some big changes but most heavily used modules were updated relatively quickly. This went far more smoothly than the Python 3 transition IMHO.
Re:Node v4.0.0 by rhinoceraptor on Tuesday September 08, 2015 @11:39PM (#10189541)
I didn't know what bad documentation was until I used Ruby. I'll take Node's docs over Ruby's any day.
Re:Node v4.0.0 by AdieuToLogic on Wednesday September 09, 2015 @01:22AM (#10189837)
> I didn't know what bad documentation was until I used Ruby.

Really? I mean, you probably could have made any other point and have it hold even the slightest amount of water.

OK, let's help you out on finding some good documentation on Ruby:

http://ruby-doc.com/docs/ProgrammingRuby/

http://ruby-doc.org/

https://en.wikibooks.org/wiki/Ruby_Programming

http://mislav.uniqpath.com/poignant-guide/book/chapter-1.htm...

http://rubylearning.com/satishtalim/tutorial.html

Re:Node v4.0.0 by joesb on Wednesday September 09, 2015 @05:13AM (#10190470)
Documentation in Ruby is bad not because of the amount of resource available. But because the community's love on language's meta-programming.

Module are dynamically included. Methods are dynamically generated. The generation static document can only give a partial view of the running objects.

Re:Node v4.0.0 by spdionis on Wednesday September 09, 2015 @10:40AM (#10191713)
And btw that's one of the winning points of PHP. Let me find some great documentation for you: http://php.net . That's it, one link is enough.
Re:Node v4.0.0 by pdpi on Wednesday September 09, 2015 @05:14AM (#10190475)
Out of curiosity, what about the Ruby documentation makes you say that? I personally rank Ruby's documentation (at least for the core language) as being pretty damn good (only a few I can think of are better), and node's core documentation is, in my opinion, a great example of how _not_ to write documentation. A personal favourite is how the first line of documentation for ClientRequest and IncomingMessage is about what creates them rather than in terms of what abstraction they represent[1]. Also, nothing in the documentation documents the types of things. In that regard, the Ruby docs are a bit weak (with the type documentation being a bit more informal than I'd like), but at least they put in the effort to document it. Also, I personally find the code samples in the Ruby docs to be much nicer than those in the Node docs (though YMMV).

[1] - https://nodejs.org/api/http.html#http_http_incomingmessage

Re:Node v4.0.0 by jtblin on Wednesday September 09, 2015 @12:54AM (#10189763)
That really smells like FUD. Sass is Ruby for example not node. Ruby has been much more unstable than node AFAIK. And python hasn't even been able to move to version 3 so not sure it's the best example. I really like both python and Ruby BTW. Haters gotta hate...
Re:Node v4.0.0 by ryanthejuggler on Wednesday September 09, 2015 @09:07AM (#10191151)
As a Node coder I used to avoid SASS since it was Ruby-based; now there's a fully-featured SASS parser in Node that keeps up with the specification. Bootstrap is moving from LESS to SASS, and they've always had their build step in Node.
Re:Node v4.0.0 by igl on Tuesday September 08, 2015 @05:59PM (#10188437)
I am a bit curious about what "massive instability" you have in mind?
Re:Node v4.0.0 by namuol on Tuesday September 08, 2015 @05:41PM (#10188369)
- Ruby: 20 years old

- Python: 24 years old

- Node: 6 years old

Maybe your comparison is somewhat unfair...

Re:Node v4.0.0 by venomsnake on Tuesday September 08, 2015 @06:42PM (#10188617)
- language

- language

- io loop + vm

Re:Node v4.0.0 by namuol on Tuesday September 08, 2015 @07:04PM (#10188711)
- language + environment + ecosystem

- language + environment + ecosystem

- language + environment + ecosystem

Re:Node v4.0.0 by dasil003 on Tuesday September 08, 2015 @07:48PM (#10188862)
In that case "Node" is 20 years old, and "Ruby" (for web development) is 11 years old.
Re:Node v4.0.0 by namuol on Tuesday September 08, 2015 @08:32PM (#10188993)
What?

It's fair to say Ruby didn't take off until 1.8 which came out in 2003, but how in any way is Node 20 years old?

Re:Node v4.0.0 by nnethercote on Tuesday September 08, 2015 @09:21PM (#10189156)
The logic being used is that JavaScript is 20 years old.
Re:Node v4.0.0 by simplyluke on Tuesday September 08, 2015 @03:50PM (#10187829)
This is why we won't use it for client work.

I'd use it for a personal project, or hackathon, but I'd be really cautious of developing mission-critical software in it.

Re:Node v4.0.0 by balls187 on Tuesday September 08, 2015 @06:25PM (#10188545)
What mission critical software do you write? Does your code review process require multiple meetings that go over a single line of code in excruciating detail?
Re:Node v4.0.0 by nandodrw on Tuesday September 08, 2015 @04:07PM (#10187926)
Why instability, how many times your Node app shouted down in production? Your concept of instability is not related with software development.
Re:Node v4.0.0 by vezzy-fnord on Tuesday September 08, 2015 @03:33PM (#10187715)
The same episode happened with GCC and EGCS in the 90s. It's the power of free software.
Re:Node v4.0.0 by acveilleux on Tuesday September 08, 2015 @03:53PM (#10187844)
Oh, I remember having to use kgcc on red hat to build a kernel because egcs couldn't... Recently worked on bits of ancient C++ that still require gcc 2.7 for that very reason.

I am so glad that gcc got its house in order. As a bonus the compiler got significantly better in pretty much all the ways it could (at least for users, no idea about internals.)

Re:Node v4.0.0 by hyperpallium on Tuesday September 08, 2015 @06:24PM (#10188540)
Wasn't there also one with Rails and Merb?
Re:Node v4.0.0 by odonnellryan on Tuesday September 08, 2015 @05:15PM (#10188248)
The more examples I see if open source in action -- that are similar to this one -- the more I start to realize what makes the `free market` special isn't the `market` part at all.

These interactions strongly mimic the interactions of the market. What's the true driving force?

Re:Node v4.0.0 by denzil_holles on Tuesday September 08, 2015 @10:59PM (#10189429)
Unlike Bitcoin Core / Bitcoin XT / BIP 120392?