Hacker News Reader

Regarding NPM compatibility: I'd be worried about potential security issues with something like npm. I recognize that one must already put a lot of trust on developers when using extensions, but I'd worry NPM would make it a lot easier for a nefarious developer to add malicious code to a really deeply buried dependency.

View on HN

Maybe it's just a matter of using node/npm tooling to develop/package an extension... using a bundler.

Of course, at this point, it might be worth re-doing the whole thing using electron as a base.. the more I use VS Code, the more inclined I am to feel that it may be good enough, and if it's a react app, maybe target react-native for phone/tablet platforms, and electron for desktop.

Reply on news.ycombinator.com