NPM Is Joining GitHub

Post by crispinb » Mon, Mar 16, 2020, 7:54 PM UTC

pgt wrote: post #236

irrational wrote: post #213

Earlier quoted context omitted.

I’ve been a developer for nearly 25 years. I’m not sure if there is anything MS could ever do to regain my trust. Unfortunately this seems to be the way of large tech companies. At one time I thought Google was the best thing ever (don’t be evil). Now I find that I view Google in much the same way as I do MS. A huge corrupt behemoth that needs to be broken up.

This is the curse of globalist behemoths. Small companies is where it's at. Localism.

Post by sneak » Mon, Mar 16, 2020, 7:54 PM UTC

filoleg wrote: post #184

sneak wrote: post #146

Earlier quoted context omitted.

Software and services are not the same thing. For some examples: RMS being a douchebag has nothing to do with the usefulness of gdb, nor can that circumstance affect the utility in any imaginable scenario. Microsoft setting censorship policies (aka ToS) on a website they own and control directly affects the utility of npm/yarn/clients. Their website, their rules.

Well, this comparison seems to be close enough. What about VSCode and Github itself?

Post by hinkley » Mon, Mar 16, 2020, 7:59 PM UTC

SahAssar wrote: post #82

hinkley wrote: post #21

Earlier quoted context omitted.

I am glad that the npm team will finally have some adult supervision. Meanwhile, I almost have my team switched to yarn.

NPM is a lot more than the CLI. Even if you use yarn as the CLI you are still using npm for hosting and all the other parts that don't run on your computer. You can run your own npm repo, but hardly anyone does for all their dependencies (not talking about just caching here). I'd wager most people who use yarn even installed it via the npm CLI.

Post by timrod » Mon, Mar 16, 2020, 8:00 PM UTC

mbesto wrote: post #252

K0nserv wrote: post #14

This seems like a good outcome overall. NPM being such an important pillar in the software supply chain while having an unviable business model and largely being funded by VC money was never a good position to be in. There are problems with more of the software ecosystem consolidating with a single entity but it still feels like an improvement.

> NPM being such an important pillar in the software supply chain while having an unviable business model and largely being funded by VC money was never a good position to be in. Why does NPM need to be funded as a commercial entity at all? What other open source library has a private company running its package manager? This one still boggles my mind.

    - the Java/Kotlin/Scala ecosystem is based around maven central, which is run by Sonatype, Inc.
    - Go modules are hosted by Google. Previously, most libraries were hosted on Github
    - Rust's crate index is on Github
    - The Docker/Moby registry is run by Docker, Inc. (though that might be a stretch for "package manager" :))

Post by triceratops » Mon, Mar 16, 2020, 8:01 PM UTC

mceachen wrote: post #111

triceratops wrote: post #53

Earlier quoted context omitted.

There's a difference between NPM the client and NPM the registry. You can point the client to any registry you want - there are a ton of options.

What other public registries are there, besides yarn's mirror of npm's registry?