Yeoman: Modern workflows for modern webapps

by paulirish • 14 years ago

135 73 14 years ago

clayferris• 14 years ago

I've been watching/waiting for Yeoman for quite a while now. I can't help but wonder how much Twitter's Bower pushed you towards launching today. This looks to fit a lot more of the workflow than just package management though and does a lot of the things I'm currently doing myself through a huge mashup of other tools.

EDIT – totally missed that this in fact uses Bower for the package managment, so probably couldn't even launch until that was released.

rlivsey• 14 years ago

Yeoman uses Bower for package management

lvh2• 14 years ago

I am currently using Brunch[1] as a build system.

How does Yeoman compare, and why should I switch?

I asked this in a previous submission on Grunt, in a thread that talked about Yeoman, but I never got an answer.

[1] http://brunch.io/

EDIT: It looks like the new FAQ addresses this issue: http://yeoman.io/faq.html > "How does Yeoman differ from tools like Brunch or BBB?" and "How does Yeoman differ from Grunt?". Post left up for other users who are wondering how this compares to Grunt or Brunch.

However, the answer seems a little... underwhelming. Apparently it's "we've made making your own scaffolds easier". Are there any other, unmentioned benefits?

EDIT2: Partial updates as I discover this myself (hope that's okay): one huge advantage is how it uses Bower beneath the surface. No more manual AngularJS/JQuery/other dep upgrading!!

paulmillr• 14 years ago

Yeoman and Brunch have many differences. You can read the small essay on them here:

https://github.com/brunch/brunch/issues/408

Bower support is coming to brunch in the next release.

VeejayRampay• 14 years ago

Paul Irish, Addy Osmani et al., sounds like a lot of win.

vasco• 14 years ago

Ah, I've been building something like this for my own use in static sites. I use Django templating with variables loaded from a config file, thinking about supporting some sort of database for more complex sites. Also planning on compiling (less), combining and minifying css/js files automatically on file changes. Like a jekyll of my own on steroids. It's a cool little side project to have that you can add bits and bytes to when you need them.

jlongster• 14 years ago

If you're looking for something that leverages require.js more for better package management, check out volo: http://volojs.org/

It is written by the same guy who wrote require.js. It probably needs better documentation, but it will be improved over time.

jarvuschris• 14 years ago

If anyone's interested in something similar for PHP that goes a few steps further, I've got a project I'm looking for feedback from some advanced developers on -- our website doesn't convey it well though yet: http://emr.ge

pdelgallego• 14 years ago

I see that they mention backbone and ember, but how does Yeoman play with angularJs?

nthitz3• 14 years ago

Their github page mentions angularJS https://github.com/yeoman/yeoman

mofle2• 14 years ago

Yeoman comes with an AngularJS generator built-in. Check the docs.

jvehent• 14 years ago

Stop doing `curl get.whatever.com|bash` ! Seriously. I have nothing against your install script, but getting devs use to that is a terrible idea !

I spent weeks explaining to junior devs to not do that on production servers. I thought it was obvious, but apparently it isn't...

nthitz3• 14 years ago

Excuse the naivety but what's the issue?

freyrs3• 14 years ago

It silently executes arbitrary code from a remote server.

mvanga• 14 years ago

You are asking developers to download a shell script from $random_site and run it immediately without any thoughts whatsoever as to what effects it might have.

Getting people used to that is a bad idea.

weaksauce• 14 years ago

You are piping the output of an untrusted command into a shell that will execute it. This leaves no way to verify that the code your are running is legit. No md5 verification, no cursory inspection of the script, etc.... There could even be hijacked dns that points to a server that specifically does a bad thing. Maybe not a huge deal for small projects but it's not a great idea in general.

Try this to see a proof of concept:

$echo "echo test" | bash

tptacek4• 14 years ago

You mean besides the fact that this gives remote code execution to anyone who can spoof a DNS record?

borplk• 14 years ago

Remote code execution Suppose in the install scripts there happened to be a line like "rm -rf /" then you'll feed that to bash...

ominous_prime• 14 years ago

I absolutely hate that this is modus operandi for the homebrew and ruby communities. Who though that this is a good idea?

petercooper• 14 years ago

Anyone who values the user experience over the tiny chance of a security breach.

I'm not validating it as a good practice, but that seems to be the main reason and I've not heard of Pow or Homebrew causing any problems in this regard.. yet ;-)

grannyg00se3• 14 years ago

Isn't that just a suggestion to get up and running quickly (for example on a dev VM)? There's nobody forcing devs to blindly follow the instruction and pipe it directly into bash. You are free to curl -L -o install.sh get.whatever.com if you want to inspect the install script.

Kudos• 14 years ago

> There's nobody forcing devs to blindly follow the instruction and pipe it directly into bash

"Nobody's forcing you" is the weakest argument.

baddox2• 14 years ago

To be fair, if you ever install and execute someone else's software without either reading the code yourself or making an attempt to verify that the source is who you intend (i.e. at least checking MD5), then you're guilty of precisely the same security gaffe.

ricardobeat3• 14 years ago

A lot more can be done wrong with a shell script pointing to some 3rd party domain than with an installed app, especially with sandboxing in modern OSes, app stores, and the much higher probability and ease of using `sudo` vs executing an app with higher privileges.

tptacek4• 14 years ago

No, that is not precisely the same security gaffe. Github (for instance) is itself not as likely to be compromised as my link to Github is.

nsheridan• 14 years ago

Worse, this script goes on to install homebrew using 'curl -k ...|ruby'. Yeah, no thanks.

brian_c• 14 years ago

The install script takes staggering liberty with your system to fetch its dependencies. Make sure you read it before running.

http://get.yeoman.io

jenius• 14 years ago

I'm learning so much reading through this. Absolutely fantastic, love it.

ch0wn• 14 years ago

When I saw the Bower announcement yesterday I was a bit concerned that with Yeoman coming up in the next weeks, there would soon be two brand new competing front-end package managers. It's presently surprised that Yeoman actually builds on top of Bower.

desireco42• 14 years ago

This is great. I would like to support it spinejs, maybe it is easy to add, haven't look yet.

This reminds me how much we need a global package manager, for most of the open source languages. Why would each framework need it's own way of handling dependencies.

mofle2• 14 years ago

You can easily create a Spine generator. Check out the docs.

aristidb2• 14 years ago

The installer seems to look for apt-get, yum or up2date to find out if a system runs Linux.

    $ uname
    Linux

Seriously.

ranza2• 14 years ago

Its using that later for installing packages using its native package system

aristidb2• 14 years ago

If I understand the code right, it only installs things automatically when it detects homebrew.

Besides, it _assumes you're on a Mac_ if none of these three programs are found.

salmanapk• 14 years ago

Go fix it?

commadelimited• 14 years ago

If you're looking for a more indepth review of Yeoman please consider checking out my article on Adobe Developer Connection:

http://www.adobe.com/devnet/html5/articles/yeoman-at-your-se...

aaronbrethorst2• 14 years ago

    Yeoman is a robust and opinionated set of
    tools, libraries, and a workflow that can
    help developers quickly build beautiful,
    compelling web apps.

Cool, but what does it do?

alexanderh2• 14 years ago

its a command line tool for web developers.

It has many capabilities useful to the modern web dev workflow.

Of most note to me, it acts as a "project creation" tool. AKA "A Scaffolding generator."

It will pull things like HTML5 Boilerplate, jQuery, Backbone.js, etc down from github, and properly generate the project files you need to start a project with those dependencies.

You dont have to worry about how any of it fits together, it will get you up and running with the latest version of everything with a simple commandline.

It also does things like minify css and javascript, as well as compiling LESS/SASS and Coffeescript.

They are unfortunately trying to make a single tool that solves many problems, when they might be better served by making many tools, that are all good at 1 thing each... I'm still waiting for them to launch this so I can see how that all pans out.

aaronbrethorst2• 14 years ago

Ah, got it. Thanks for the clarification!

tucson2• 14 years ago

Can this tool connect to a mysql database and generate html5 CRUD forms based on the database? I have seen a tool like phreeze.com and I am wondering why there is not more in that direction (building web app basic pages based on existing database design)?

grannyg00se3• 14 years ago

If you have already built a few web apps, wouldn't you already have your scaffolding that can be copied into a new app? And as a bonus, you will have scaffolding that you understand very well.

"You don't have to worry about how any of it fits together..." That doesn't seem like an advantage.

alexanderh2• 14 years ago

Stop posting this until its out haha. They've been teasing with videos, and their "pivate beta" for so long now its torture...

lvh2• 14 years ago

It is out, that's what this submission is all about :)

ryanisinallofus• 14 years ago

I may try this out for my next project but gosh darn if that talking head isn't annoying. Screen demos should never, ever have talking heads.

Sym3tri2• 14 years ago

I have a similar more light-weight project template that requires no installation (except node). Pith auto-generates test module dependencies and uses Backbone too :)

https://github.com/sym3tri/pith

aDemoUzer• 14 years ago

was able to get it running on windows, so I am happy with it. Needs more in-depth guide so I know what it provides and the reasoning behind ur "sane defaults"

Sym3tri2• 14 years ago

Thanks. More documentation is on my todo list... please stay tuned.

btipling• 14 years ago

I like how it sets up shims I always re-implement in require.js. Sweet.

mattdawson• 14 years ago

I'm using Brunch[1] for a current project, and have used Backbone Boilerplate[2] in the past. Brunch is pretty great, though bbb is better hooked up with requirejs out of the box, if you're into that kind of thing.

I really want Yeoman to take off, in particular because I really want one of these tools to become the breakout hit. I'd rather everyone be focusing on improving one tool instead of all this effort going diffuse across a bunch of different solutions. I'm a python dev, and I thank the stars that pip became so standard. (Not that this is a direct analog to pip, but pip provides a subset of this functionality when it comes to packaging.)

One note: the Ember init is waaaay basic. I know that these are going to be community maintained, but I would have hoped that the Ember generator bundled with this initial release would have included at least commonjs or requirejs integration.

[1]http://www.brunch.io [2]https://github.com/tbranyen/backbone-boilerplate

brian_cloutier• 14 years ago

A quick note, the bottom of that script has this section:

  if [ "$COMPASS" -eq 0 ]; then
    echo ""
    echo "Install hiccup: no compass"
    echo "Sorry chap, compass wasn't setup because there was a problem with your ruby setup. You can check the documentation here for help: [link to documentation]."
  fi

You should probably make that an actual link for when people have problems.

Very nice install script by the way, you clearly had a lot of fun making it.

ranza2• 14 years ago

Why all the hate? If it's that bad, help out and make it cool. Make it a brew package, or npm, or gem maybe. Alternative installers for those who dont want the curl script|sh thing.

I think its a great idea!

*edit Actually just noticed that it IS an npm package that can be installed using `npm install yeoman´

dgr81• 14 years ago

To the authors: Please make sure to remove trailing whitespace. I see it all over the code base. Run 'git diff 4b825dc642cb6eb9a060e54bf8d69288fbee4904 --check' to catch those. That SHA is that of the empty tree, applicable to any git repo.

moneypenny• 14 years ago

I don't know who to reply to: There's a lot of correct comments from people saying they don't want to run a script through curl from a site. Fair enough.

But why not just fork the repo on Github (or onto your own infrastructure) and run the script from there, where you can verify any tampering?

Yeoman: Modern workflows for modern webapps

Related Stories