Are there any statistics concerning Lucee usage ou...
# lucee
g
Are there any statistics concerning Lucee usage out in the world? How many devs on the project, where its being used, what companies have endorsed it? Are there any Lucee promotional materials? lol......need it to show our higher ups that moving to the platform is a sound move.
d
I haven't seen any usage stats, but I'm not sure the number of developers working on the project is really going to make the higher ups feel good about the move (because it's less than a handful of people actively working on the code). I think the biggest selling point is that it's open source so even if it goes away tomorrow, your app can still keep on living. Your organization has the ability to maintain the application stack even if development on Lucee stops. You can't say that with ACF (especially now that they've moved to non preputial licensing). If ACF shuts things down, unless they decide to release a patch that allows it to continue to work for license holders, your app is dead. However, you still won't be able to patch bugs or fix security issues. Not a problem with Lucee (yes, it might take a lot of resources to fix the issue, but still can be fixed).
g
Do we know how wide Lucee's footprint is in installed base?
d
I doubt there's any accurate numbers, since it's open source and anyone can download it and start using it. Then there's also all the various different ways it can be installed (standalone, JAR only, CommandBox, etc).
s
@dswitzer (side note: that is one of the best “damn you autocorrect” words posted on this channel) 😂 made my day …
b
Hey Gerry, we have been using Lucee for years running SAAS systems with thousands of users. - Lucee is open source and free. However I'm sure they are happy to receive donations. - The Lucee organization is in Switzerland. - Lucee can be easily deployed with CommandBox, and/or docker containers. - Lucee is very stable, and the community (on this channel) are very supportive - Lucee runs DistroKid if you are familiar with them. But what makes Lucee a sound move? If your team understands and prefers CFML, Lucee is a great choice and will reduce costs... that is, if you are comfortable with not having a support phone number to call. The alternatives are either ACF or BoxLang. ACF requires license fees, where BoxLang has both open source and license models. If that sill doesn't sell your "higher ups", show them Lucee's activity on Github. It is constantly being improved. Hope that helps!
d
Boxlang will be stable soon (praying to all fusion gods). And if you attend the ortus conference in April you get 1 free year of Boxlang Plus which comes with Support.
b
Yes, BoxLang is becoming a contender for sure. But wanted to add that even Apple uses Lucee.
d
That is cool. Do you know what type of websites they use it for?
b
Don't know. This article discusses the analysis of vulnerabilities on an "Apple" production server involving Lucee installations. Apparently, any RCE vulnerabilities have already been addressed by the Lucee team. So why would Apple commission this analysis? You can be the judge. So yes, Apple used Lucee, but to what extent, I have no idea. https://projectdiscovery.io/blog/hello-lucee-let-us-hack-apple-again
d
Cool article.