Skip to content

rethinking website generator (constant security advisories from the JavaScript/Node ecosystem) #378

@aldas

Description

@aldas

I am creating this as TODO or discussion.

We previously used Hugo - which is written in Go - to generate the Echo website. In PR #290, we migrated to Docusaurus, a Node.js–based framework.

However, since the switch, the constant stream of security advisories from the JavaScript/Node ecosystem has become overwhelming. It feels like nonstop noise. And after reading about the Shai-Hulud npm worm, I’m increasingly cautious about updating dependencies without risking getting compromised.

@vishr do you have time/bandwidth to comment if we could go back to something more stable - like Hugo was?

Metadata

Metadata

Assignees

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions