oliverdavies.uk/content/node.207113dd-f0f6-4e8a-ab98-6c6b4a53c032.json

{
    "uuid": [
        {
            "value": "207113dd-f0f6-4e8a-ab98-6c6b4a53c032"
        }
    ],
    "langcode": [
        {
            "value": "en"
        }
    ],
    "type": [
        {
            "target_id": "daily_email",
            "target_type": "node_type",
            "target_uuid": "8bde1f2f-eef9-4f2d-ae9c-96921f8193d7"
        }
    ],
    "revision_timestamp": [
        {
            "value": "2025-05-11T09:00:10+00:00"
        }
    ],
    "revision_uid": [
        {
            "target_type": "user",
            "target_uuid": "b8966985-d4b2-42a7-a319-2e94ccfbb849"
        }
    ],
    "revision_log": [],
    "status": [
        {
            "value": true
        }
    ],
    "uid": [
        {
            "target_type": "user",
            "target_uuid": "b8966985-d4b2-42a7-a319-2e94ccfbb849"
        }
    ],
    "title": [
        {
            "value": "Vetting third-party open-source software"
        }
    ],
    "created": [
        {
            "value": "2024-06-13T00:00:00+00:00"
        }
    ],
    "changed": [
        {
            "value": "2025-05-11T09:00:10+00:00"
        }
    ],
    "promote": [
        {
            "value": false
        }
    ],
    "sticky": [
        {
            "value": false
        }
    ],
    "default_langcode": [
        {
            "value": true
        }
    ],
    "revision_translation_affected": [
        {
            "value": true
        }
    ],
    "path": [
        {
            "alias": "\/daily\/2024\/06\/13\/vetting-third-party-open-source-software",
            "langcode": "en"
        }
    ],
    "body": [
        {
            "value": "\n          <p>Open-source software, such as Drupal modules and themes, PHP libraries and Tailwind CSS plugins, is great.<\/p>\n\n<p>Instead of writing everything from scratch, if someone else has written what you need, you can use it.<\/p>\n\n<p>In the Drupal ecosystem, there's a saying - \"There's a module for that!\".<\/p>\n\n<p>But, assuming you find a project that adds the functionality you need, you should review and vet it before adding it to your application.<\/p>\n\n<p>Adding too many modules and libraries can cause performance issues, add a maintenance overhead, introduce upstream bugs and add potential security vulnerabilities.<\/p>\n\n<p>As well as reading the code, here are some questions I ask and things I look for when deciding to add a project or not:<\/p>\n\n<ul>\n<li>Does it do what I need?<\/li>\n<li>Does it add too much functionality? Is there a more minimal version that does what I need without the extra overhead?<\/li>\n<li>Does it have a stable release? If there's only a development or alpha release (which are unstable and can break at any time), I wouldn't add it.<\/li>\n<li>Is it extendable? Can I configure or extend it if I need to add more or alter it's default functionality?<\/li>\n<li>How many other websites are using it? Websites like Drupal.org and Packagist will show usage statistics.<\/li>\n<li>How many open issues are there?<\/li>\n<li>When was the most recent commit and release?<\/li>\n<li>Does it have automated tests? If so, are they passing?<\/li>\n<li>Does it have a README.md file or other documentation?<\/li>\n<li>Who are the maintainers?<\/li>\n<li>Are they responsive to issues and accepting of outside contributions? If I find a bug, can I fix and contribute it?<\/li>\n<li>Does the project have a published roadmap?<\/li>\n<\/ul>\n\n<p>Finally:<\/p>\n\n<p>Do I really need it?<\/p>\n\n        ",
            "format": "full_html",
            "processed": "\n          <p>Open-source software, such as Drupal modules and themes, PHP libraries and Tailwind CSS plugins, is great.<\/p>\n\n<p>Instead of writing everything from scratch, if someone else has written what you need, you can use it.<\/p>\n\n<p>In the Drupal ecosystem, there's a saying - \"There's a module for that!\".<\/p>\n\n<p>But, assuming you find a project that adds the functionality you need, you should review and vet it before adding it to your application.<\/p>\n\n<p>Adding too many modules and libraries can cause performance issues, add a maintenance overhead, introduce upstream bugs and add potential security vulnerabilities.<\/p>\n\n<p>As well as reading the code, here are some questions I ask and things I look for when deciding to add a project or not:<\/p>\n\n<ul>\n<li>Does it do what I need?<\/li>\n<li>Does it add too much functionality? Is there a more minimal version that does what I need without the extra overhead?<\/li>\n<li>Does it have a stable release? If there's only a development or alpha release (which are unstable and can break at any time), I wouldn't add it.<\/li>\n<li>Is it extendable? Can I configure or extend it if I need to add more or alter it's default functionality?<\/li>\n<li>How many other websites are using it? Websites like Drupal.org and Packagist will show usage statistics.<\/li>\n<li>How many open issues are there?<\/li>\n<li>When was the most recent commit and release?<\/li>\n<li>Does it have automated tests? If so, are they passing?<\/li>\n<li>Does it have a README.md file or other documentation?<\/li>\n<li>Who are the maintainers?<\/li>\n<li>Are they responsive to issues and accepting of outside contributions? If I find a bug, can I fix and contribute it?<\/li>\n<li>Does the project have a published roadmap?<\/li>\n<\/ul>\n\n<p>Finally:<\/p>\n\n<p>Do I really need it?<\/p>\n\n        ",
            "summary": null
        }
    ],
    "feeds_item": [
        {
            "imported": "1970-01-01T00:33:45+00:00",
            "guid": null,
            "hash": "920f52af5b2ff64ff720e6726ce03219",
            "target_type": "feeds_feed",
            "target_uuid": "90c85284-7ca8-4074-9178-97ff8384fe76"
        }
    ]
}