earthlingdavey

This is a valuable insight - and you are probably in the majority. Thanks for taking the time to explain, this is probably valuable user research for the EmDash folks :)

The permissions/sandboxing (and Clef review) IS the reason you can have a reasonable confidence in trusting a random plugin publisher.

samtp - I think you're looking for the answer to two or more problems here.

  - Can I trust that a plugin is (relatively) secure?  
  - Can I trust that the plugin will be maintained?  
  - Can I trust that the plugin will be good quality and work as described?

So far EmDash has an answer to what I think is the most important question (IMO). Can I trust that a plugin is (relatively) secure? Yes.

That's something WordPress haven't been able to do - so I'd say well done to the EmDash team! And, if I wasn't building my own CMS (with a very similar permission model) then I would probably be trialling it right now :)

> I am now scared to talk to anyone. Eventually the conversation turns to AI and they want to talk or show their vibecoded app.

> I am just tired boss. I am not going to look at your app.

Hey, I feel bad for you. I would say try and avoind HN if you don't want to see AI.

But, in this case, I want to respectfully disagree with you. I read the frontpage of HN almost daily, I never really jump into conversations, for this post about EmDash I am absolutely qualified to contribute.

There are precisely 2 open source projects in existence (proove me wrong) where the "Worker Plugin" architecture has been taken. Mine and EmDash. Looking at some of the code examples from EmDash was like looking at my own docs.

If you don't want to look at my app, then fine. But please don't gatekeep, I'm qualified to talk here.

I agree with your sentiment. Meet the customer where they are at, right?

Years ago, I would have said small bussinesses are on cPanel, FTP-ing files to the server. Asking them to run NodeJS is crazy. But here we are, the hosting landscape is vastly different, is it still so crazy to ask a small business owner to put there code on GH, connect GH to a hosting platform and push?

---

Anyway, I doubt you will see people dropping off WP and migrating sites to EmDash. What's more likely will be that it is considered as an alternatave for new projects.

I know you can, but do blog-like sites really Island architecture?

IMO most sites like that would be better to pick no-framework, vanilla or jQuery for interactivity.

I can't image average WP users would be happy to move to EmDash, only to have a constant stream of dependabot updates for Astro.

It has 55 direct (non-dev) dependencies https://www.npmjs.com/package/astro?activeTab=dependencies - while ejs has 0 and nunjucks has 3.

I'm weary of updates, maybe it's just me, but I doubt it.

The main thing is unified types.

- I've been done GraphQL server with a build step to share types between languages.

- I've used untyped JS client side code.

Both are prone to bugs, and not much fun.

TS for front and back end: sharing types means you'll have editor type hints, catch type errors at lint (or build), and you might even share validation logic between client and browser.

So well crafted in-fact, that if you pay them, they will provide the service.

Why not a templating language, like Nunjucks EJS or JSX, with vanilla JS for interactivity?

This is very interesting. I've worked with WordPress on and off for 10 years, and I'm convinced that this project has got 2 things absolutely spot on. TypeScript and Worker plugins.

I've given the security, or lack of, WP a lot of thought recently. In WP malicious plugin has access to the database, enfironment variables, rendering text on screen (think XSS). Luckily, a thoughtfully designed plugin system can mitigate all of those issues.

I've been working on a headless CMS in my spare time that is eirily similar to EmDash in a few ways. It's in very early development, but I will share regardless. It's called HotsauceCMS - https://github.com/hotsauce-team/hotsauce

- I went with optional NodeJS or Deno Worker plugins, this means that first-party plugins can benefit from the speed of in-process, and other plugins can be run in Workers. For fine grained permission control, you can use Deno Workers.

- I went with absolute minimal dependencies, I am so fed up with Dependabot alerts and npm supply chain hacks. My CMS has only 4 dependencies, 0 transistive dependencies.

- It's Drizzle schema first, and headless. So you have full controll of the database structure, use cms hints in your schema for features like file upload.

- It's database-agnostic, so it works with any Drizzle-supported database (Postgres, MySQL, SQLite)

- Being headless, you can use any frontend, my preference is JSX w/o react, but anything goes.

Feedback is absolutely welcomed on HotsauceCMS, did I miss a trick, am I on the right track?

Anyway, congratulations on EmDash. I'll be following closely, excited to see how the next few months unfold.

It's not really that common in British English. I've heard it from colleagues who learnt English in India.

I find it fascinating that it seems like this works for some (humans) but not others.

n=1 ... a tripple dose of omega-3 capsule gives me a noticalbe improvement in my depression within 24 hours.

Yes, written by a blogger with a focus on 'wealth management, investments, financial markets and investor psychology.'

Not a single mention of natural world.

I just finished reading this interesting series of blog posts. It seems like this is a good example of the fediarated moderation process.

Non pay-walled article

https://www.eurekalert.org/news-releases/930043

He's content, I admire that.

Not much curiosity when it comes to food, but it sounds like he's interested in nature.

And to say that he is rejecting the other foods is a bit of a stretch, I mean, for example, are you rejecting a career as a sheep farmer? You might love it.

Or maybe you're content with something too

Sketch

Check Wes Boss's videos on Js node and React.Some of them are free, some are paid.

Is there a way to get around the Medium paywall?

You quit cos of this? Did you change your mind yet? CSS in JS is pretty good for performance and organising of styled components. Give it at least a day or two of learing before you throw 10 years work down the drain ️

I like your thinking. With a slight twist, what you're suggesting can be done right now with Idena.

Websites can incorporate a sign in with Idena button to protect from bots and prove the user is human. The visitor must be validated on the Idena network (the userbase is growing, it's 2k at the moment)

.md and .css together like peanut-butter and jelly. good job :)

A good primer for anyone interested in using blockchain for democracy and a better world. Thank you :)