Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Tell HN: Node.js koa-router package transferred to unknown user

github.com

Post reply on HN
Print view View original

31–40 of 48 posts

Re: Tell HN: Node.js koa-router package transferred to unknown user

#31

Post by pryce »

niftylettuce wrote: post #21
amingoia wrote: post #20

Please stop harassing me. Let's set the record straight. The Koa organization did not write, maintain, or ever help with this package. I wrote it. I maintained it, with help from people who reached out to me directly (and actually contributed code). @ZijianHe offered to maintain it, and I agreed to let him maintain it. Our relationship is not anyone's business. I don't have a relationship to the koa organization. I d…

To clarify things for the community: 1) No, they (Chinese developers) have not contributed more. You revoked access from @jbielick who was #2 contributor to the package behind you. He messaged me in Slack today that he received zero notification from you and simply received a notification from NPM that he was removed access from the package. You removed his access completely from NPM. 2) My email to you prefaced the…

I notice that Alex's claim about you "repeatedly" making accusation(s) regarding "Chinese" users seems to refer to your emails to NPM, not your email to Alex himself that you have provided above.

I hope my attempt to clarify this aspect doesn't take the focus off the other parts of your responses, because the issues you raise are concerning to me and I share your belief that the community deserves info about all this.

Re: Tell HN: Node.js koa-router package transferred to unknown user

#32

Post by [deleted] »

pryce wrote: post #31
niftylettuce wrote: post #21

Earlier quoted context omitted.

To clarify things for the community: 1) No, they (Chinese developers) have not contributed more. You revoked access from @jbielick who was #2 contributor to the package behind you. He messaged me in Slack today that he received zero notification from you and simply received a notification from NPM that he was removed access from the package. You removed his access completely from NPM. 2) My email to you prefaced the…

I notice that Alex's claim about you "repeatedly" making accusation(s) regarding "Chinese" users seems to refer to your emails to NPM, not your email to Alex himself that you have provided above. I hope my attempt to clarify this aspect doesn't take the focus off the other parts of your responses, because the issues you raise are concerning to me and I share your belief that the community deserves info about all this…

[deleted]

Re: Tell HN: Node.js koa-router package transferred to unknown user

#33

Post by jeremejevs »

Tangential, but koa-router isn't even that great, been using koa-tree-router [0] instead. Fewer dependencies, no API oddities and long-standing bugs [1], faster. It's much younger (less battle-testing), and has no regex and multi-parameter routes, but is worth considering.

[0] https://github.com/steambap/koa-tree-router

[1] https://github.com/ZijianHe/koa-router/issues?q=is%3Aissue+i...

Re: Tell HN: Node.js koa-router package transferred to unknown user

#34

Post by chrischen »

gnahckire wrote: post #26
amingoia wrote: post #20

Please stop harassing me. Let's set the record straight. The Koa organization did not write, maintain, or ever help with this package. I wrote it. I maintained it, with help from people who reached out to me directly (and actually contributed code). @ZijianHe offered to maintain it, and I agreed to let him maintain it. Our relationship is not anyone's business. I don't have a relationship to the koa organization. I d…

> Let's set the record straight... @ZijianHe offered to maintain it, and I agreed to let him maintain it. Our relationship is not anyone's business. Why not be transparent about selling the package? Or attempting to do so? > Chinese developers have contributed more to this repository than anyone from the Koa organization. This kind of racial scaremongering or guilt by association is not acceptable. Its offensive. Nic…

If you pulled up crime statics on black people vs white people, you'd have similar damning statistics. Rather than prejudicing this "unknown Chinese" guy why not treat him as a person first and find out who he is, and what he has to say?

Re: Tell HN: Node.js koa-router package transferred to unknown user

#35

Post by [deleted] »

amingoia wrote: post #20

Please stop harassing me. Let's set the record straight. The Koa organization did not write, maintain, or ever help with this package. I wrote it. I maintained it, with help from people who reached out to me directly (and actually contributed code). @ZijianHe offered to maintain it, and I agreed to let him maintain it. Our relationship is not anyone's business. I don't have a relationship to the koa organization. I d…

[deleted]

Re: Tell HN: Node.js koa-router package transferred to unknown user

#36

Post by [deleted] »

chrischen wrote: post #34
gnahckire wrote: post #26

Earlier quoted context omitted.

> Let's set the record straight... @ZijianHe offered to maintain it, and I agreed to let him maintain it. Our relationship is not anyone's business. Why not be transparent about selling the package? Or attempting to do so? > Chinese developers have contributed more to this repository than anyone from the Koa organization. This kind of racial scaremongering or guilt by association is not acceptable. Its offensive. Nic…

If you pulled up crime statics on black people vs white people, you'd have similar damning statistics. Rather than prejudicing this "unknown Chinese" guy why not treat him as a person first and find out who he is, and what he has to say?

[deleted]

Re: Tell HN: Node.js koa-router package transferred to unknown user

#38

Post by ZijianHe »

Hi all. I am the one who took over the repo. Thanks for some of you guys reaching out.

I haven't been contributing to open source projects before so I don't have too much public information on my Github account.

Thus I think it would be a good opportunity for me to join the open source community by maintaining the koa-router project.

I will start reviewing PRs and getting rid of issues after I finish going thru the code.

Any suggestions are welcome

Re: Tell HN: Node.js koa-router package transferred to unknown user

#39

Post by doublerebel »

yazboo wrote: post #13
jhare wrote: post #7

Earlier quoted context omitted.

I agree on them not doing much. As in not much at all to help. How about I just go ask for every package on NPM and see who's busy enough to deal with that or not? I love Javascript but the ecosystem stinks.

Could you not do that on PyPi and rubygems as well?

Absolutely not. PyPi and Rubygems have much more strict and sane ownership policies to prevent unauthorized takeovers of packages. (Same with apt and every other major package repo.)

No package in any package manager, if it contains code, and greater than 0 downloads and dependencies, should ever be replaced. The cost of storing an old package is miniscule compared to a system where anyone can petition for a package name takeover and cause unlimited cost through the effects of takeover. 30 days is absurdly short in the lifetime of software and does nothing good for the community. Package squatting is not a real problem for anyone.

In this case, the owner wanted the ownership change so it's really a non-event.

Re: Tell HN: Node.js koa-router package transferred to unknown user

#40

Post by midway »

Not commenting about the transfer but the urge from some to move this to the koajs organization (which is silly request):

Great about koa is that it's not a monoculture like express. express has all batteries included and lacks a healthy ecosystem. Yes, there is a lot stuff out but everything in and around express feels broken. Yes, you can use it and it's ok but you not really happy.

This paired with the same maintainers who also are on connect, express-generator, etc. They do all together a great job maintaining express but you feel the lacking pace in all these project. express still lacks hhtp2 (not turn-key-ready), express-generator is full of strange edge-cases nobody needs (in the www file) polluting your code. express docs got better but still.

But we as a community need healthy competition and if koa-router moved to koajs you'd start the next monoculture and new contenders wouldn't have any chance to establish because there is a default router.

The key to be successful is to build a minimal/barebone product and let others create additions and not swallowing everything into a slow org.

And tbh, I like koa-router but simple stuff like a regex path matching is not included where I need my own middleware (I mean it's a few lines but still).

Everyone who don't like this move, fine, fork koa-router and make it better and we will see if koa-router's new maintainer is a real maintainer who will push the product. Or just write your own router, it's not that hard.

Forking and improving is open source not complaining in dozen threads and pressuring people to hand out a repo (this reminds me of office politics and blackmailing" 'give us the repo or we destroy your and the new maintainer's reputation online'). I think it's more about getting the SEO-relevant Github and npm name 'koa-router'.

So guys, just stop it, welcome the new guy and/or fork, I am happy to yarn add your fork.

Post reply on HN