You may want to make it more "Agent Ready"

https://radar.cloudflare.com/scan/4d52f3e5-5983-45bf-a993-2c...

Servo uses mozjs which is just rust bindings for SpiderMonkey which is still C++.

All this effort to use rust and yet they would not rewrite the JS engine which is the biggest attack surface for memory vulns.

Setting aside the fact that using Rust for a JIT won't help that much - a new JS engine is a huge undertaking, especially if the goal is to compete with V8. They could eventually switch to Boa[1] if they wanted more safety, but it's still ways off and doesn't seem necessary enough just yet

Also, isn't the goal of Servo to effectively compete with CEF first and foremost? Because you don't need memory safety for that really

I referenced Boa without linking, so: https://github.com/boa-dev/boa

Why would it help? Rust doesn’t do anything to make generated assembly code safer.

But you would want one to get competitive performance.

One thing at a time, it looks like implementing a rendering engine from scratch is already enough work for 20 years. First make it work, then make it better.

there is active work to make the js engine more pluggable https://github.com/servo/servo/issues/40600 (and safety work)

https://servo.org/blog/2024/04/15/spidermonkey/

https://github.com/servo/servo/wiki/Servo-and-SpiderMonkey-R...

the monthly updates always mention their refactoring work on the script crate

They can always reimplement it later.

Focus on core right now, you can change js engines further down the line if need be.

Has anyone tried using ClickHouse to build a SIEM or security related tool?

Yes

https://clickhouse.com/resources/engineering/siem

https://clickhouse.com/blog/how-huntress-improved-performanc...

so much for democracy

Do not fucking use npm. Stay the fuck away from it. Want to write JS? AI can now write vanilla JS for you with no libraries. Own your code.

I don't like vanilla JS though. I like easier-to-read abstracted JS.

Shameless title.

More like X.400 times convoluted

Feels like a rug pull.. smells like enshittification

Don't buy from Amazon and expect anything but. Knowing the kind of company it is and still being a customer is inexcusable.

this is a long article that doesn't say much at all. likely generated by AI?

it goes on for ages just to reach the point of "write the tests first"

We really need to add "please don't write comments witch-hunting articles for AI usage" into the guidelines at this rate

It is useful for those of us always checking the comments first, to decide if the article is worth reading.