Re:Intro to Docker, React, and Security
by shishy on Tuesday January 22, 2019 @12:49AM
(#18966263)
I understand you're comparing NodeJS vs Nginx there, but for my curiosity, if someone is building an API, how do you think NodeJS would compare to Ruby on Rails or Python/Django from a security standpoint?
[ Parent
| on HN ]
Re:Intro to Docker, React, and Security
by praseodym on Tuesday January 22, 2019 @05:31PM
(#18973285)
I don’t think either language is fundamentally more secure than the other.
That being said, the Node.js ecosystem feels more immature than Python’s. The common practice of using microdependencies means that an average project has countless dependencies with varying levels of support — it’s all but impossible to make sure every one of those dependencies is properly maintained.
The framework/library churn rate seems to have decreased though, so that’s certainly good from a security standpoint as well.