Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

The GitHub registry public beta is live

help.github.com

Post reply on HN
Print view View original

11–20 of 137 posts

Re: The GitHub registry public beta is live

#11

Post by OJFord »

hprotagonist wrote: post #6

There's no immediate mention of this on the site, but -- why did they select the package formats that they did? I'd love to be able to host wheels for my python projects, or {rpm, deb, flatpack, etc...} for effectively arbitrary code. Is that in the works?

Some function of popularity on the platform and ease of implementation, I'm sure.

And, I suspect (from python's noteworthy absence), degree to which the language's users were already (mis)using GitHub releases (or sites) for this purpose.

Re: The GitHub registry public beta is live

#12

Post by dang »

catern wrote: post #7

The lack of "the" makes this read a bit weirdly: >GitHub Package Registry allows you to develop your code and host your packages in one place. You can use packages from GitHub Package Registry as a dependency in your source code on GitHub. "Package registry" is a fairly generic term, so to me it would be natural to refer to this product as "the Github package registry" (capitalized or not). Is there a name for delibe…

I don't know, but have a 'the' above.

Re: The GitHub registry public beta is live

#13

Post by Pxl_Buzzard »

danShumway wrote: post #9

> is a software package hosting service, similar to npmjs.org, rubygems.org, or hub.docker.com, that allows you to host your packages and code in one place. You can host software packages privately or publicly and use them as dependencies in your projects. I am... really confused by this. Isn't this just Github? Github is a hosting service that allows you to host your packages and code in one place. It has testing an…

This appears to be a move to meet package managers halfway. Yes, tools like npm and go have great integration with git repositories, but others like NuGet still require a hosting source. Long-term, you could imagine package managers forgoing their own hosting services in favor of letting GitHub be the primary host who takes on the issues of bandwidth, availability, access controls, etc. It's another vector for GitHub to compete in FOSS.

Re: The GitHub registry public beta is live

#14

Post by skluck »

catern wrote: post #7

The lack of "the" makes this read a bit weirdly: >GitHub Package Registry allows you to develop your code and host your packages in one place. You can use packages from GitHub Package Registry as a dependency in your source code on GitHub. "Package registry" is a fairly generic term, so to me it would be natural to refer to this product as "the Github package registry" (capitalized or not). Is there a name for delibe…

I wonder if Microsoft influenced the naming, they often use generic terms for product names.

* Microsoft Office

* Microsoft SQL Server

* MVC Framework

Re: The GitHub registry public beta is live

#17

Post by hobofan »

At least in the case of NPM (I don't know as much about the other ones): Doesn't that create a huge opportunity for hijacking attacks, where someone publishes a malicious NPM package in the default NPM registry under the scope identical to a Github organization/username?

Re: The GitHub registry public beta is live

#18

Post by matharmin »

danShumway wrote: post #9

> is a software package hosting service, similar to npmjs.org, rubygems.org, or hub.docker.com, that allows you to host your packages and code in one place. You can host software packages privately or publicly and use them as dependencies in your projects. I am... really confused by this. Isn't this just Github? Github is a hosting service that allows you to host your packages and code in one place. It has testing an…

In my experience, using git as a dependency source for NPM (including yarn) or Ruby never worked well. It works for a simple case, but it's usually much slower, has issues around managing credentials for private repos, and doesn't have a nice way to publish built files.
Post reply on HN