rethinking website generator (constant security advisories from the JavaScript/Node ecosystem)
I am creating this as TODO or discussion.
We previously used Hugo - which is written in Go - to generate the Echo website. In PR #290, we migrated to Docusaurus, a Node.js–based framework.
However, since the switch, the constant stream of security advisories from the JavaScript/Node ecosystem has become overwhelming. It feels like nonstop noise. And after reading about the Shai-Hulud npm worm, I’m increasingly cautious about updating dependencies without risking getting compromised.
@vishr do you have time/bandwidth to comment if we could go back to something more stable - like Hugo was?
Sure. Let me research more and comment back.
@aldas will begin working on it next year.