Summary of TRIPU "Una arquitectura cabal para proyectos Node.js complejos"

00:00:00 - 00:40:00

The video discusses managing Node.js projects, with an emphasis on non-trivial projects, and presents solutions for organizing code, managing dependencies, optimizing development processes, and ensuring code stability. The speaker presents a mono repo approach and provides a directory structure for a generic project, as well as tools and tricks for dealing with vulnerabilities, optimizing testing, and improving automation. They also recommend resources for further learning, including W3C validators, open-source software on GitHub, and a public wiki page. The presenter encourages feedback and concludes by thanking the audience.

• 00:00:00 In this section, the presenter introduces the topic of the talk, which is about Node.js, NPM, and non-trivial projects in Node.js. He also mentions that the presentation is not suitable for those who have extensive experience with Node.js or those who have never seen it. The presenter emphasizes that the talk is intended to be a debate, not just a Q&A session. He then introduces himself as a software engineer with experience in JavaScript and Node.js and briefly talks about the challenge of organizing complex Node.js projects. He encourages the audience to picture their own projects as he goes through the talk.
• 00:05:00 In this section, the video discusses the challenges of managing large code bases in Node.js applications. The speaker notes that complex projects may require many different components, such as databases, background processing, and shared libraries, and managing all of these can become difficult over time. The speaker presents two possible solutions: a monolithic approach, which involves creating one large repository with subdirectories, or a split approach, which involves breaking up components into different repositories. The speaker notes that both approaches have their advantages and disadvantages, and presents their own proposal for organizing Node.js projects.
• 00:10:00 In this section, the speaker discusses the challenges that arise when developing complex Node.js projects and the debates around the use of mono repos versus many repos. While many developers tend to split up projects into different repositories, the speaker suggests that adopting a mono repo structure can provide certain advantages, especially when dealing with shared code and multiple teams. The speaker also outlines a suggested project structure and directory listing for a generic project, which includes a build script, documentation, and configuration files stored at the root directory, with each subdirectory containing a separate Node.js project.
• 00:15:00 In this section of the video, the speaker discusses how to manage the dependencies of a package in Node.js. He explains that each piece of code within the package will have its own version of files, and there will be a graph of dependencies between the different pieces. Using the example of a streaming server, he shows how to specify dependencies using the file colon syntax, making it easy to import them from NPM later on. He also introduces the build.sh file, which is a simple script to help manage dependencies and clean up directories containing unnecessary files.
• 00:20:00 In this section, the speaker discusses additional tricks and tools for working with Node.js projects. They mention the use of Greenkeeper, which submits pull requests for new versions of packages in your project's dependencies, as well as NPM check and updater, which help ensure that all dependencies are being used and up-to-date. The speaker also shares a one-liner command that can be used to replace a package in all package.JSON files. Overall, these tools and commands can help make development and maintenance of Node.js projects easier and more efficient.
• 00:25:00 In this section, the speaker shares a trick on how to deal with vulnerabilities in packages in NPM by using the NPM audit. They explain that NPM audit does not have a mechanism for exceptions but suggests creating a file listing all the vulnerabilities that are safe and then using a script in the package setup JSON that will search for all the lines containing a URL for a vulnerability and compare it with the list of safe vulnerabilities. The build will only continue if the diff command succeeds, i.e., if the file contains exactly what NPM audit returns after grepping. This method ensures that only the interesting lines of the list are kept, and the build can continue without any issues.
• 00:30:00 In this section of the video, the speaker discusses various tools and practices that can be used to optimize and automate the development process of complex Node.js projects. These include using an open-source vulnerability checker called Tripu, using linters (such as es lint and J's hint) to ensure consistent code formatting and quality across packages, implementing code coverage tools such as NYC and Coveralls to monitor the progress of testing suites, and using continuous integration (CI) tools such as Travis CI and Circle CI to ensure that the codebase remains stable and up to date. The speaker also notes the benefits of using GitLab's built-in CI/CD pipelines, but raises doubts about the future of similar features on GitHub.
• 00:35:00 In this section, the speaker recommends using checkers instead of validators, which are now available on GitHub. These checkers are much more adapted to HTML5 and serve as useful tests. Developers can download this project and use it offline, however, it's a bit of a project as it's in Java and takes a while to compile. Once it's compiled, developers can have it there forever and can use it offline for validation. The speaker also advises using a package like Winston for logging and using PM2 to keep different independent processes managed as separate entities.
• 00:40:00 In this section, the presenter provides several resources for developers to use and contribute to, including W3C validators and open-source software on GitHub. They also mention a small summary of Node.js good practices and a public wiki page with a list of resources about JavaScript and Node.js. For sharing code, they recommend two tools, Code Sandbox and Rank It, which allow running server-side Node.js. The presenter encourages comments and questions from those who have come up with different solutions or have any questions. They conclude by thanking the audience for attending.