8 votes
Accepted

What really is a "web server" in relation to popular frameworks like Flask, Node.js, Apache?

In IT in general we're all really bad at using words that are either Not rigorously defined The rigorous definition is different than the way the term is commonly used (e.g. strong typing) In other ...
Jared Smith's user avatar
  • 1,839
4 votes
Accepted

What techniques can help me identifying unused dependencies for a production build?

The Dev Dependencies are only installed when doing a full npm install (usually locally). These usually include testing type of dependencies or other dependencies only needed for the local development ...
Jon Raynor's user avatar
  • 11.5k
3 votes
Accepted

Open source projects, SBOMs and security

There is nothing inherently wrong in publishing all the dependencies (including their version) app used - or an SBOM, as you called it - at publishing time. However, this may become a potential ...
Doc Brown's user avatar
  • 207k
2 votes

Are mature dependencies less risky than state of the art ones?

There are many factors at play to choose between "fast" or "slow" upgrades. The main one is that unless you have an absolutely gigantic budget (time, people, expertise) you will ...
l0b0's user avatar
  • 11.4k
1 vote

User authentication using cookies in a web app using API on different domains

Yes it's achievable. Javascript runs on domain1, logs in gets auth token, saves to cookie on domain1. Javascript on domain1 wants to call domain2. Read the token from domain1 cookie. build request to ...
Ewan's user avatar
  • 75.8k
1 vote

flow control solutions in Node.js - use async.waterfall?

pipe of async functions can be done in a really clean way: npm install js-awe This is how the solution of your problem looks like: import {plan, repeat} from 'js-awe' const createCollection = plan()....
Jose Marin's user avatar

Only top scored, non community-wiki answers of a minimum length are eligible