Manifest: A 1-file micro-back end

96 点作者 andrewshadura大约 2 个月前

18 条评论

lexicality大约 2 个月前

The lack of object level permissions is a really spectacular footgun and the fact that it's not even on the roadmap is concerning.Want to allow users to set their own name? I hope you're OK with any user being able to update any field of any other user too!Added a new entry and didn't specify a policy for every single available action? They default to unauthenticated access!> If no policy is specified for a rule, the access is public for the related action, thus anyone can manage records.Aaaaaa!

评论 #43442419 未加载

评论 #43439938 未加载

treve大约 2 个月前

Looks like it doesn't use locking, so running two instances will corrupt your 'database': <a href="https://github.com/mnfst/manifest/blob/master/packages/core/manifest/src/storage/services/storage.service.ts#L72" rel="nofollow">https://github.com/mnfst/manifest/blob/master/packages/core/...</a>It feels a bit mean to write this, but whenever someone reinvents a database this is the first thing I look to gain some confidence the authors understood what they were getting into.Probably best to stick to sqlite instead!

ludicrousdispla大约 2 个月前

For a 1-file micro-backend this sure does have a lot of files and dependencies.

评论 #43436299 未加载

mubou大约 2 个月前

I'd love to see a frontend for this. Most CMSs are either tailored specifically for blogs or are complicated to set up. I've often wanted something like I guess Access or Filemaker Pro (if anyone remembers that) but with a modern UI and database.Not for production use, mind you, just like, say I have a library of books or blu-rays and want to create a catalogue of them (with images, so a spreadsheet is a no-go). Being able to just bang out a single-file config and have an impromptu CRUD admin would be awesome.

评论 #43434110 未加载

评论 #43435594 未加载

madduci大约 2 个月前

Nice one, but it's really a pity that npm delivers so many deprecated warnings for such a new project

rpier001大约 2 个月前

I wonder if anybody has used PostgREST (<a href="https://docs.postgrest.org/en/v12/" rel="nofollow">https://docs.postgrest.org/en/v12/</a>) and explored this could provide a comparison. They seem largely similar with PostgREST having some feature advantages associated with being built on Postgres. Where does Manifest have an advantage?

评论 #43439963 未加载

Joker_vD大约 2 个月前

Do I have to use emojis when introducing the entities? Are they used for anything?

评论 #43435846 未加载

评论 #43434955 未加载

oulipo大约 2 个月前

Could go all the way, and instead of a YAML, just do a literate Markdown, so you can embed the code and documentation, something like<pre><code> # My Pokemon backend ## Entities Let's start by defining my entities, I want to model Pokemons, so I'll just add this: ```yaml Entities: - Pokemons: - Bulbasaur... ```</code></pre>

elysianfields大约 2 个月前

I want to like this, but there are a couple of red flags. One is using SHA-3 to hash and store the passwords.You shouldn't use such a hashing function for password storage. Calculating password hashes should be computationally expensive, not cheap.Nuff said, overall it looks like a cool project to toy around with, but not something you should be using to build a product with yet.

评论 #43441853 未加载

pjerem大约 2 个月前

I tried to search for "migration" in the docs but found nothing ? What do you do if you want to modify your schema?

评论 #43436294 未加载

kevmo314大约 2 个月前

Seems like Prisma + PostgREST but more tightly coupled. Neat idea, certainly seems useful for some small-scale projects.

ur-whale大约 2 个月前

Whenever I look at a new project on github, the first thing I do is try to get to the "core" of the source code, where the actual code that implements the basic feature actually lives.One quality metric that I've noticed my brain has developed over the years is how deep in the directory hierarchy I have to dive to finally find some actual code amidst the mess of config files, readmes, yaml things, json metadata and various other crap that carry essentially no semantic.It's been surprising how accurately this metric measures the overall quality of the project.Large Java codebases are one of the worst offenders in that regard.Unfortunately by this metric, and independent of anything else, this project does not fare well at all ... I give you my first attempt at actually finding the code, depth=<a href="https://github.com/mnfst/manifest/blob/master/packages/core/admin/src/app/app.component.ts" rel="nofollow">https://github.com/mnfst/manifest/blob/master/packages/core/...</a>depth=6 below project top dir (ignoring github-added crap)

o1o1o1大约 2 个月前

Has anyone tested if this works on Cloudflare pages/workers?Just interested as I like the ease of use and free entry level, especially for small projects.Also: interesting idea, will have a look at it some time.

darccio大约 2 个月前

The idea is interesting. I wonder what makes it AI-friendly. It isn't explained on the repository or the website, but I can imagine that the YAML-based DSL could be the reason.

评论 #43436350 未加载

yakshaving_jgt大约 2 个月前

If I need a 1-file backend, I can pretty easily do this in Haskell. I have more trust in this still working next year also.<pre><code> {-# LANGUAGE OverloadedStrings #-} {-# LANGUAGE QuasiQuotes #-} {-# LANGUAGE TemplateHaskell #-} {-# LANGUAGE TypeFamilies #-} import Yesod data App = App mkYesod "App" [parseRoutes| / HomeR GET |] instance Yesod App getHomeR :: Handler Html getHomeR = defaultLayout [whamlet|Look at me. Just one file.|] main :: IO () main = warp 3000 App</code></pre>

评论 #43437095 未加载

joeblubaugh大约 2 个月前

This is nifty - anybody seen examples of writing a server-side view layer with this?

DrStartup大约 2 个月前

Is there anything like this or pocketbase for MongoDB?

m3kw9大约 2 个月前

Feature creep is gonna be the main issue