Generally web developers should be learning node and react, but If you’re a PHP developer then yes I imagine it is worth learning. Between Magento and Adobe Commerce PaaS that codebase will be in the wild for decades to come. The framework itself is intense and all, but it’s well thought out and tries to use it’s underlining language. So if you’re serious about learning the language it can be a good place to see interesting patterns and learn to troubleshoot big codebases.
Doug Hatcher
Enterprise architecture and tech junkie
Adobe has been investing a ton in App Builder and is where you should focus your energy github.com/adobe/com…
You’re looking at this correctly. This is a big issue with all package managers, node and others suffer from the same kinds of issues. GitHub has dependabot that will routinely scan for vulnerable packages, and you can do similar things on your own to try and mitigate the risk. There was a suggestion about using something like Symphony where it doesn’t draw from as many dependencies. This seems like good advice, but it might be going too far as I work with projects with much higher package counts and they are considered secure. Still, it’s worth thinking about and especially when picking frameworks and libraries it’s important to think about where you’ll be down the line when you circle back around and need to upgrade it all. It’s not necessarily about the number of packages, it’s more about if those packages are well maintained and have continuity through an upgrade path as they release new versions.
Conceptually it’s the same thing - there was even an Admin interface for installing extensions at one point. Packages can be installed either via composer or through a “manual installation” which is just like extracting a zip in the right directory. The considerations are similar to Wordpress too, which is to say that if you install an extension but modified the themes then it’s possible the extension won’t present correctly and will need to be fixed.
That’s what the developer is likely accounting for… you install the module, test it… realize one of your changes has surpassed something or there’s a latent incompatibility and you have to address it first. In a Magento world, we typically do things locally, then to a series of integration and staging environments before finally deploying to production whereas with Wordpress folks often make their changes on the live instance.
The Magento-focused hosting providers are worth their weight in gold if you don’t have real server experience. Magento can be hosted on any cloud, but as others have said there’s a lot of esoterics and if you don’t know them well you’ll surely regret it