Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

NPM Is Joining GitHub

github.blog

Post reply on HN
Print view View original

321–330 of 588 posts

Re: NPM Is Joining GitHub

#321

Post by [deleted] »

sneak wrote: post #146
bdcravens wrote: post #137

Earlier quoted context omitted.

Then you must not like React or Angular, since the owners of those projects are the largest spyware and aggregators of personal data in the history of humanity.

Software and services are not the same thing. For some examples: RMS being a douchebag has nothing to do with the usefulness of gdb, nor can that circumstance affect the utility in any imaginable scenario. Microsoft setting censorship policies (aka ToS) on a website they own and control directly affects the utility of npm/yarn/clients. Their website, their rules.

[deleted]

Re: NPM Is Joining GitHub

#322

Post by msla »

kingbirdy wrote: post #107
fredsted wrote: post #83

Earlier quoted context omitted.

Embrace, extend, extinguish?

How would MS possibly extinguish linux?

They can't. That's why I hate people using that chestnut in relation to Linux: It doesn't work for two reasons which stick out at me.

Reason one is because Linux is GPL'd, Microsoft can't extend Linux without giving its extensions back to the community.

Reason two is because Linux is already established in multiple realms, so Microsoft can't bully its way into dominance. Microsoft has a respectable presence in server rooms, but it isn't absolutely dominant by a long shot. Microsoft probably has something going on in the embedded/hobbyist SBC space, but there's no path for them to dominate there. And, FWIW, Linux owns the supercomputer world. I also can't see IBM falling over itself to put Windows on mainframes.

Re: NPM Is Joining GitHub

#323

Post by z3t4 »

Was gonna write about all the bad stuff that can happen, but don't want to give any ideas. Instead I give advice; embrace and empower, rather then extend and extinguish.

Re: NPM Is Joining GitHub

#324

Post by cjbassi »

pkilgore wrote: post #308
skrebbel wrote: post #261

Earlier quoted context omitted.

> after we saw what happened to yarn I missed something, what happened to Yarn?

The maintainer released Yarn 2. Yarn 2 is pretty foundationaly different than Yarn 1, and can and does break a lot of products/projects if used. Some folks are not happy about it, although Yarn 1 will probably continue to be maintained by the community for a while. This seems to be pretty fair about the whole thing: https://shift.infinite.red/yarn-1-vs-yarn-2-vs-npm-a69ccf022...

Note that yarn is also no longer under the control of Facebook and the primary maintainer who has been developing yarn 2 no longer works there.

https://yarnpkg.com/advanced/qa#is-yarn-operated-by-facebook

Re: NPM Is Joining GitHub

#325

Post by rdiddly »

sandov wrote: post #32
kdaigle wrote: post #18

Earlier quoted context omitted.

Today we've announced that we've signed an agreement to acquire NPM but we technically have not acquired them yet (referred to as "closed"). NPM is still their own company for now and that's why the language is future tense.

"Github is acquiring npm" then. "NPM is joining Github" sounds like you're just using Github to host your stuff.

I literally thought that, clicked hide, then thought "Wait a minute, do they mean...?" and had to go fish it out of hidden items.

"Joining" is an interesting term here... but I suppose it won because it sounds more like something friendly humans would do. "NPM Is Breaking Bread and Sharing with Github as Special Friends."

Re: NPM Is Joining GitHub

#326

Post by golergka »

Supermancho wrote: post #136
sneak wrote: post #125

Earlier quoted context omitted.

I do not consider the largest distributor of proprietary, closed-source spyware (Windows) owning the fastest growing open source package manager to be a good outcome, personally.

You aren't the only one. Most users are too young to understand how predatory Microsoft has always been. Can't wait for the "npm won't publish my package because it circumvents something in Windows" or whatever. Give it time.

And pulling a package from a custom url is what, one line of code in this package documentation? And the moment it happens, this package will be on top of HN?

I understand the concern about MS business practices, but I don't think it applies to environment where transactions (as in, importing someone's package or submitting a pull request to it) don't involve any contracts or money.

Re: NPM Is Joining GitHub

#327

Post by jchw »

ocdtrekkie wrote: post #312
jchw wrote: post #288

Earlier quoted context omitted.

In my opinion Microsoft has done a great job as long as you can completely ignore everything about Windows 10. https://hothardware.com/news/microsoft-changes-offline-accou... https://www.howtogeek.com/519572/microsoft-is-testing-ads-in... And that is all recent, on top of all the other stuff they won’t fix, like issues where file extensions magically reset to Windows defaults, nagging you to just please try Edge beca…

I would generally agree Windows looks more like traditional Microsoft than many other arms of their org. And the Candy Crush thing... like, if it was just Home edition? Fine. If it was even smart enough to realize it need not preinstall that on a domain account (the installation of UWP apps is technically per-user), like, if they'd demonstrated any recognition that Windows is used in professional settings... I'm righ…

I’m a fulltime Firefox user personally, and I have not noticed a whole lot of nag. Does it not show up under Linux or something?

edit: So far I’ve tried switching my user agent, turning off adblock, using a private/logged out window, on docs and search. Not that I’m doubting you or anything, but I am surprised I’ve not noticed it much since switching back to Firefox.

It’s also probably worth disclosing that I work for Google, though at home I am using Firefox and Duckduckgo.

Re: NPM Is Joining GitHub

#328

Post by brunoborges »

bad_user wrote: post #296
timrod wrote: post #277

Earlier quoted context omitted.

For programming languages, there are several examples of commercially run package managers: - the Java/Kotlin/Scala ecosystem is based around maven central, which is run by Sonatype, Inc. - Go modules are hosted by Google. Previously, most libraries were hosted on Github - Rust's crate index is on Github - The Docker/Moby registry is run by Docker, Inc. (though that might be a stretch for "package manager" :))

Maven Central has mirrors and alternatives and you can trivially host your own repository, all you'd need is a plain web server serving a bunch of static files. Some libraries aren't hosted on Maven Central actually, so it's not uncommon to see instructions for adding extra resolvers to your build config. The Java ecosystem isn't as dependent on Maven Central as the JavaScript ecosystem is on npmjs.com

Almost every library out there is on Maven Central. Even Oracle JDBC drivers are now (finally) on Maven Central.

If MC goes away as it exists today, the Java Ecosystem will take a huge hit as almost every open source project would stop building in CICD environments from the get-go.

Re: NPM Is Joining GitHub

#329

Post by manigandham »

throwaway78359 wrote: post #232

Microsoftie here — throwaway for obvious reasons. Microsoft doesn’t do everything right but the GitHub acquisition has honestly gone better than I ever expected. Rather than forcing GitHub to adopt Microsoft centric policies, Microsoft has adopted more GitHub stuff, especially from a product POV. GitHub still runs as a separate company (different logins and health care and hiring systems) with its own policies and po…

What's wrong with Microsoft's dev strategy? .NET continues to be the most powerful and productive platform that I've used.

.NET Core was a great move and it's all coming together nicely now, and even creating innovations like Blazor.

Re: NPM Is Joining GitHub

#330

Post by rafaelvasco »

Supermancho wrote: post #136
sneak wrote: post #125

Earlier quoted context omitted.

I do not consider the largest distributor of proprietary, closed-source spyware (Windows) owning the fastest growing open source package manager to be a good outcome, personally.

You aren't the only one. Most users are too young to understand how predatory Microsoft has always been. Can't wait for the "npm won't publish my package because it circumvents something in Windows" or whatever. Give it time.

It may appear blaming Ms forever for their past actions is a good idea. It's not. Those actions and decisions came from certain people. They're long gone. I look only to the present. MS decisions and actions these past few years have been pretty solid imo. We must always assume the best of everything, not the worst. Not matter what. It may appear naive, but it's the only sane way.
Post reply on HN