Live data from Hacker News

JFrog S-1

sec.gov

41–50 of 67 posts

Re: JFrog S-1

#41
post #10
post #5

I guess I've not worked in big enough corporates to use this. Can any user here provide some context what JFrog does? The website doesn't really say much, the example pipeline files for JFrog pipelines seem more complex than GitLab CI.

For me JFrog is synonymous with Artifactory -- I think that was their earliest / bread & butter product? That may just be my interaction. It's an on-premise/cloud hybrid source artifact repository. The nice thing about it is that it is one product that can act as a maven/npm/pip/etc. repo. If you're in a polyglot org (big enterprise) and you have security needs/historical baggage to host on-premise (big enterprise) t…

It's quite useful, and certainly better than trying to roll it yourself, but it's also surprisingly slow.

Re: JFrog S-1

#42
post #40

Though Artifactory is currently still listed as being OSS on their site ( https://jfrog.com/open-source/ ) they stopped publishing the source code after the 7.0 release of Artifactory (somewhere beginning this year). I guess this could be the reason. Having an OSS product is not something investors get thrilled about... Usually JFrog is pretty responsive on StackOverflow though for this particular question they seem…

Rightly so, considering the next step for a lot of such OSS projects is AWS offering it as paid hosted service with zero benefit to the maintainers. So then they have to couple it with a restrictive license which devalues the "open" part.

> So then they have to...

Why do they have to?

Re: JFrog S-1

#43
post #5

I guess I've not worked in big enough corporates to use this. Can any user here provide some context what JFrog does? The website doesn't really say much, the example pipeline files for JFrog pipelines seem more complex than GitLab CI.

Their flagship product is Artifactory, a polyglot artifact repository, which is used throughout most of the Fortune 100.

Re: JFrog S-1

#44
Has anyone else had nothing but trouble with Artifactory? We are furiously migrating away from it to Github packages for our internal NPM repository. Their uptime has been abysmal.

Re: JFrog S-1

#45
post #40

Earlier quoted context omitted.

Rightly so, considering the next step for a lot of such OSS projects is AWS offering it as paid hosted service with zero benefit to the maintainers. So then they have to couple it with a restrictive license which devalues the "open" part.

> So then they have to... Why do they have to?

To make money

Re: JFrog S-1

#48
post #45

Earlier quoted context omitted.

To make money

Can they not compete with Amazon? The developers know the product best.

I think the real problem is that in a lot of companies, there’s a huge institutional inertia towards adding a new supplier vs. paying an existing supplier slightly more.

Re: JFrog S-1

#49
post #45

Earlier quoted context omitted.

To make money

Can they not compete with Amazon? The developers know the product best.

ElasticSearch or Redis seem like a good example of the challenges with that approach. Managing contracts is tedious and there's a substantial convenience factor for the difference between “click and it's running on your existing bill” and “go somewhere else, get setup with a license, take over O&M for your own servers”.

If it's really critical, you'll do that but a company has to be really dependent on a piece of software (or unusually cognizant of the open source maintainership problem) to go the second route. Built-in defaults carry a lot of weight.

Re: JFrog S-1

#50
post #45

Earlier quoted context omitted.

To make money

Can they not compete with Amazon? The developers know the product best.

They know their product best, and Amazon knows hosting best. So competing with Amazon hosting their product is an uphill battle.
Post reply on HN