experimental D3 & TypeScript project setups

• D1: modern syntax ES6 or TypeScript
• D2: few and stable dependencies (for future proofness)
• D3: easy setup with npm install and npm start
• D4: code completion and warnings in VS Code
• D5: fast & automatic complilation and reloading in Chrome
• D6: small size for production

ES6 JavaScript, no building

TypeScript and Webpack4 with HtmlLoader

TypeScript and Webpack4 without HtmlLoader

Parcel v1 -- old code base, security risks possible

Svelte with TypeScript and Rollup

TypeScript and Webpack4 with Bulma and Font Awesome

Which playground had more security vulnerabilities (D2)?

• 2021-06-15 postcss: bulma playground
• 2021-06-06 ws: all webpack & parcel playgrounds
• 2021-05-28 dns-packet: all webpack playgrounds
• 2021-05-26 browserslist: parcelv1 playground (also vue projects)
• 2021-05-?? lodash: parcelv1 playground
• 2021-05-08 url-parse: all webpack playground
• 2021-04-30 ssri: all webpack playground
• 2021-03-10 elliptic: all webpack & parcelv1 playground
• 2021-01-01 node-forge: parcelv1 playground (manual fix needed)
• 2021-01-01 ini & node-forge: webpack playgrounds
• 2020-08-01 elliptic: all playgrounds
• 2020-07-19 lodash: all playgrounds
• 2020-06-07 websocket-extensions: webpack playgrounds
• 2020-04-06 minimist: all playgrounds
• 2020-04-05 acorn: all playgrounds

This work was partly funded by the Austrian Research Promotion Agency (FFG): grant #866855 via ReMoCap-Lab and the FH St. Pölten via ZoteroVis Pilot.