`npm install` time (in seconds)
(forcing a clean cache, average of 5 runs)
Notably, next.js seems to bypass `npm` by vendoring its dependencies (speedier install, without those pesky npm audits)

9 replies
Hides `npm audit` reports during installation:
Astro
Gatsby
Next (via vendoring)Shows `npm audit` reports during installation:
Eleventy
Nuxt
Remix
SvelteKitTelemetry (anonymous data collection on usage) enabled by default (requires opt-out):
Astro
Next.js
Gatsby
NuxtNo known Telemetry or data collection:
Eleventy
Remix
SvelteKitThis concludes the Site Generator Review—happy to receive feedback or recommendations on aspects of these tools you’d like to see reviewed for next time!
I should probably cross-post to the blog post that resulted from the above thread!
@zachleat would love to see wire sizes for the JS bundles (gzip, not brotli, as not everyone has that yet)
@zachleat How does one hide `npm audit` reports‽ That's a bit scary.
(fwiw, I don't consider what Next is doing as "vendoring", they're apparently rather "bundling" everything into a single big JS file through https://github.com/vercel/ncc –not the same as bundledDependencies though–; result is the same though: remove dependencies from the package.json; do Astro and Gatsby do similar things?)
@tbroyer https://fediverse.zachleat.com/@zachleat/109916510211225665 has some more context.
Ah fair point about the definition of vendoring!