yedidmh

I have to push back: you've found the seam.

Anyone else can't scroll on this site?

I would give you a hundred upvotes if I could. This is a fantastic resource, looks perfect for what I want

Thanks!

I want to prevent attempts to example break out of the container into the parent system

Anyone have advise or links for how to dynamically run untrusted code in production? Specifically NodeJS.

It looks like the isolated-vm package is the go-to, but understandably it prevents things like fetch or being able to import packages.

I’m thinking to use docker and have a single base image that exposes an API that will take an arbitrary string, check for and install imports, then eval (eesh) the code, but before going down the road of implementing it myself and going crazy over properly securing the containers I’m thinking that there has got to be some prior art. How are Codesandbox et al doing it?

Would love to hear it too

I misspoke.

It's not Front-End dev as a whole, just the "pushing-pixels" stuff.

There's a ton of difficult FE work (esp. state). It's just that when it comes to a lot of the "basic" styling and responsiveness there's a lot of tedious work that should be automate-able (just like any framework or library, the goal is to reduce unnecessary work, not to suggest that the work is trivial).

The difference is that Shopify and Wordpress are for well-defined solutions (shopping, blogs, landing pages), but are NOT viable for custom software applications.

It was low-code for the back-end as well or just front-end?

Back-end feels really risky to me, because visual logic builders are just so limiting compared to code.

100%. Key thing is finding the right abstractions where the tool does enough to provide real value, but slots neatly into your existing workflow without requiring a bunch more work to actually integrated.

I don't think low-code as a "generalized" solution will ever gain traction with developers, but has a future as small, focused tools to solve specific dev problems.

Yeah, I think Zapier is one of if not the only example I've come across in my software dev career of a low-code-type tool that devs will reach for before doing stuff by hand.

Great example of where low-code is a better alternative for a very narrow use case of development.