logoalt Hacker News

EmDash – a spiritual successor to WordPress that solves plugin security

390 pointsby elithrartoday at 4:14 PM291 commentsview on HN

Comments

vessenestoday at 4:18 PM

Here to say -- great name. It's not just a reference to our modern times, it's a sign of brilliance. (I wrote this myself with no clanker support)

show 1 reply
ramesh31today at 4:52 PM

I really hope Cloudflare is ready and willing to stand by this thing for the next 20 years, and drive it as a first class product with a huge open source team. Because short of that you can just add this to the mile-long list of "successors to WordPress" we've been through over the decades. Maybe they're in it for the long haul. We'll see. But it takes time, and mountains of integrations and acceptance into the wider web authoring ecosystem for anything like this to gain real adoption.

show 1 reply
solarkrafttoday at 5:49 PM

Convince me this isn’t vibeslop.

If Cloudflare really have radically changed their software development philosophy lately, this would actually be an interesting project, being based on Astro and coming with some APIs for programmatic management.

Them being so happy about the „cost of software development“ and not going very deep into ecosystem, community or project management doesn’t convince me that this is going to be a worthwhile project, even if, unlike their previous vibe coding demos, this one actually works.

show 9 replies
rodolphoarrudatoday at 5:21 PM

Plugin security is one thing. Plugin budget is another thing... much larger of a problem in some cases.

mrbonnertoday at 6:21 PM

I am not sure if this is an April fool joke anymore in the age of AI.

TacticalCodertoday at 8:54 PM

This reminds me of Linus Torvalds about Git, criticizing that SVN did present itself as "CVS done right" for... "It's impossible to get CVS right". Which I found incredibly funny and witty.

Is the second coming of Wordpress what we really need?

capitanazo77today at 8:11 PM

Name it CloudPress

t1234stoday at 7:44 PM

I think wordpress, woo commerce and elementor are in a Mexican standoff. Wordpress cant fork or change in a major way because the other two are so popular no one would use the new variant. woo commercere and elementor can't just walk away and make their own wordpress-less platform because they rely on each other and the other constellation of plugins that run on wordpress.

show 1 reply
hyperionultratoday at 7:06 PM

Wordpress is PHP, which has developer base insanely larger then typescript. Also, a lot cheaper. Compete with that.

show 2 replies
pxtailtoday at 4:51 PM

Good one, at last, April fools joke with some effort.

TheRealPomaxtoday at 6:37 PM

From the people who brought you "we used AI to undercut a project we use rather than pay them fairly for the work we relied on" comes an exciting new lawsuit by Mullenweg for using Wordpress in their product description.

devmortoday at 7:37 PM

You want a spiritual successor? We have Ghost.

You want anything beyond ghost? Find a way to port the vast market of 100,000+ cheap and free themes and components that are available to enable tech-illiterate, low-budget users to basically build an entire business platform on a $5/mo shared hosting plan.

A vibe coded CMS that's 3 months in the making is not capable of taking that place in the market, no matter how much VC funding you put behind it.

sam345today at 6:44 PM

I for one am glad that WordPress has some competition. This sounds like a killer rewrite.

philipwhiuktoday at 4:32 PM

The problem is that it doesn't solve the network-effect problem.

People aren't on WordPress because of WordPress.

They're on WordPress because of WooCommerce, a million themes, BuddyPress, integrations for every stupid internal business API on the planet (many of which are terrible and were written by an idiot with a crayon).

The APIs will have no testing because they are bad. In many cases the WordPress implementation of the API written in the codeblock, ran on page-load to the pain of the person responsible for SEO, is the API contract.

And yes those plugins are also terrible, but they solve business problems, even if they are tech problems.

You can't just launch a better wp-core and expect it to replace any of that.

EmDash needs to actually run the existing insecure WP plugins to takeover.

show 1 reply
jaredcwhitetoday at 8:37 PM

No thanks, I hate it.

(To be clear, I'm no fan of WordPress either, and its security hassles are a real issue. But some sloppified MegaCorp vibecoded fever dream will never be a suitable replacement, of that I guarantee.)

show 1 reply
sergiotapiatoday at 6:16 PM

Spiritually bankrupt, that should just be considered marketing material.

_clonedtoday at 5:08 PM

Payload

tamimiotoday at 5:00 PM

Will be there a way to export all the posts to markdown so you never get locked in?

AIorNottoday at 4:57 PM

Damm Anthropic had a chance to say april fools too for the claude code leak!!

mrcwinntoday at 4:50 PM

It’s written in typescript, not PHP. How does this improve security if no one uses it because they’ve invested so much in the WP plugin ecosystem?

yeah879846today at 4:52 PM

"Failed to initialize playground"

show 1 reply
squidbeaktoday at 4:40 PM

Impressive and created by agents. Another example for skeptics wondering where the AI apps are.

show 3 replies
riffictoday at 5:39 PM

if this can implode the crooked "web hosting industry" that surrounds the lamp / wordpress ecosystem the better.

delbronskitoday at 6:47 PM

Ha! Nice April Fools joke. Nothing will succeed WordPress. Not even AGI. Specially not something with the name EmDash. Good one Cloudflare.

sublineartoday at 8:41 PM

Why?!

Half the websites on wordpress moved to shopify, squarespace, etc. a very long time ago. The remaining half were blogs, personal pages, wikis, etc. that moved to community/social platforms created in the past decade(s). In a few cases out of all this someone finally learned how to write/host a webpage themselves (imagine that)! It's even easier with AI now.

I'm totally serious when I ask "why". Who actually uses a CMS or anything like that anymore? It's madness!

hnismadtoday at 6:28 PM

EmDash on Apr 1 come on guys

eistoday at 7:37 PM

After all the AI slop from Cloudflare in recent months and the embarrassment that came with it, they dare to launch this vibe coded project with THAT name on April 1st? I'm really not sure what to think anymore. Reality became too absurd.

camillomillertoday at 7:33 PM

Lol, build the same level of community first, then we’ll talk

orliesaurustoday at 6:18 PM

deployed it on vercel for lolz - it works!

delfinomtoday at 6:46 PM

Is this just literally turning plugins into microservices? Lol

ChrisArchitecttoday at 4:53 PM

Held up getting into the details of this ambitious project because of the name! Ridiculous choice considering the associations with AI, slop, and even the general crowded namespace surrounding that. C'mon.

(looks for cameras) Wait a minute, am I being Punk'D? Oh my god! Ashton, you really got me! Ha Ha! Ashton!

jeremie_strandtoday at 9:25 PM

[dead]

gbibastoday at 8:32 PM

[dead]

aplomb1026today at 5:31 PM

[dead]

sensitiveCaltoday at 6:35 PM

[dead]

toolpipe_devtoday at 6:09 PM

[dead]

throwaway613746today at 5:17 PM

[dead]

ValveFan6969today at 7:26 PM

[dead]

9864247888754today at 4:53 PM

[dead]

mmaundertoday at 9:14 PM

The generous take is that this is someone's pet project that marketing got too excited about, and that the leadership haven't applied their minds to. GPL provides a moat for the community, who are contributing their time and energy into a project. It ensures that, even if a commercial company grabs your software, extends it, and commercializes it, that you can fold those improvements back into your original distribution. While the commercial entity benefits from your free labor, you benefit back from theirs.

Re-implementing WordPress (their words, not mine) as MIT licensed, while legally questionable, breaks that virtuous cycle and removes the community's moat. They've taken WordPress's roles and menus and borrowed its Gutenberg code (which is GPL), and launched it as an MIT licensed product, which breaks that virtuous cycle. It means e.g. a hosting company can take the product closed source if they want to, and never have to contribute any of what they build on top of the community's work, back to the community.

https://github.com/emdash-cms/emdash/tree/main/packages/core... says "The core EmDash CMS package - an Astro-native, agent-portable reimplementation of WordPress."

Emdash uses WP's RBAC roles. Also uses their menus. Also depends on @wordpress/block-serialization-default-parser which I think might (??) be able to be used by an MIT project even though WordPress is GPL.

They used Claude Code it seems because the first commit has a CLAUDE.md file which became an AGENTS.md.