Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

pnpm: Fast, disk space efficient package manager for JavaScript

pnpm.io

Post reply on HN
Print view View original

141–150 of 173 posts

Re: pnpm: Fast, disk space efficient package manager for JavaScript

#141

Post by bavell »

crispyalmond wrote: post #139
topaz0 wrote: post #127

Earlier quoted context omitted.

I think GP was amazed by the sheer number of dependencies, not by the how many of them are duplicated. It also amazes me. People talking above about having 10s of GB of dependencies. Crazy to me.

This amazes me as well. At work we have a simple website which has 1 GB of node_modules and the actual source code is well under a megabyte.

I'm very curious to know how in the world a node_modules directory can grow above 1GB! Which dependencies are the worst offenders? Is it dominated by a few huge deps?

Re: pnpm: Fast, disk space efficient package manager for JavaScript

#142

Post by pas »

epolanski wrote: post #108
kall wrote: post #90

I'm pretty immune to most JS ecosystem churn, but on package managers I'm feeling it. All I want is a package manager that is correct, causes very few day to day issues and is going to work the same way for many years. Yet everyone seems to be optimizing disk usage and speed without even getting the basics (make it work, make it right) fully covered. I don't understand why people are optimizing for disk space at all…

Because symlinks solve all the pronlems of nesting and duplication while providing none that I can think of. I've been using pnpm and rush in my projecrs, and going back to npm at my employer's every day is such a chore.

yarn1 used to have a global package cache (enabled by default), but now it's disabled, because many packages don't work if they are symlinked.

Re: pnpm: Fast, disk space efficient package manager for JavaScript

#143

Post by scambier »

zkochan wrote: post #35
scambier wrote: post #9

Earlier quoted context omitted.

I was unable to use pnpm with a project that used Electron (~2 years ago), IIRC because some spawned process was incompatible with symlinks. It's the only time it caused me trouble though, it's indeed much faster than npm. I'd love to use it at work too.

In any cases where pnpm doesn't work, you may set the node-linker=hoisted option and it will work: https://pnpm.io/npmrc#node-linker With node-linker=hoisted, pnpm creates a traditional hoisted (aka flat) node_modules, without using symlinks.

Good to know, thanks!

Re: pnpm: Fast, disk space efficient package manager for JavaScript

#144

Post by jakubmazanec »

ricardobeat wrote: post #109
jakubmazanec wrote: post #26

Earlier quoted context omitted.

I want to specify only those deps that I use directly. Imagine a `foobar` package, that has `babel` peer dependency because it does some transpiling or whatever. For me as a user of `foobar`, that Babel requirement could have been regular dependency instead of peer. I don't care, I don't use Babel. In another words - if a package manager has all the information necessary to install all dependencies, why should I add…

As the post you shared yourself explains, peer dependencies were meant for plugins/extensions. It would make no sense for you to depend on “foobar” directly without having babel as a dependency already. If foobar can be used standalone, then babel is a standard dependency, not a peer dept.

Technically true, but not how it is actually done. People very often specify packages like Babel, React, TypeScript, GraphQL, etc. as peer dependencies even when they shouldn't.

Anyway, in any case, auto installing peer deps solves both situations. There really is no reason to not auto install them.

Re: pnpm: Fast, disk space efficient package manager for JavaScript

#145

Post by zkochan »

epolanski wrote: post #114
zkochan wrote: post #88

Earlier quoted context omitted.

In the USA there are different people. Good and bad. There are states that are very conservative and there is California. There are some basic values that everyone agrees upon. I think nobody can claim that everyone is bad or good in the US. Same goes for any other democratic society. Same goes for Ukraine. There are a lot of people that I don't like in Ukraine. In Russia there are some good people but they are in ex…

There's different people in Russia too. No one is blocking US citizens because they dropped bombs killing 300 people shopping in markets or 200k civilians in Iraq or for the many abuses like Abu Grahib. Actually america has been by far the biggest aggressor on the planrt in tge last decades, and it killed the most civilians outside Africa. That's my problem with this massive anti russian hysteria in software. You onl…

You have the audacity to call it anti Russian hysteria, when I should hide from air raid attacks sometimes several times a day?

Please don't use pnpm. Use Yarn or npm, those are better package managers for you.

Re: pnpm: Fast, disk space efficient package manager for JavaScript

#146

Post by zkochan »

throwaway0x7E6 wrote: post #122
zkochan wrote: post #88

Earlier quoted context omitted.

In the USA there are different people. Good and bad. There are states that are very conservative and there is California. There are some basic values that everyone agrees upon. I think nobody can claim that everyone is bad or good in the US. Same goes for any other democratic society. Same goes for Ukraine. There are a lot of people that I don't like in Ukraine. In Russia there are some good people but they are in ex…

Quoted post unavailable.

> US-backed color revolutions - including the one in your very own country,

I see

I hope you won't use pnpm and we won't speak again.

Re: pnpm: Fast, disk space efficient package manager for JavaScript

#147

Post by maxgraey »

throwaway0x7E6 wrote: post #122
zkochan wrote: post #88

Earlier quoted context omitted.

In the USA there are different people. Good and bad. There are states that are very conservative and there is California. There are some basic values that everyone agrees upon. I think nobody can claim that everyone is bad or good in the US. Same goes for any other democratic society. Same goes for Ukraine. There are a lot of people that I don't like in Ukraine. In Russia there are some good people but they are in ex…

Quoted post unavailable.

> Iraq, Afghanistan, Libya, Syria, all within the very recent history, plus countless more US-backed color revolutions - including the one in your very own country, which realistically is the very reason for the current state of affairs in there.

Oh God! You and your conspiracy theories are annoying. If the U.S. is so powerful, why hasn't it organized a color revolution in Russia or at least in Serbia, maybe in pro-Russian Hungary? I was at both revolutions in Ukraine and I know why they arose, they were supported by the Ukrainian people, self-organized. And it's been like that all through our history. You don't know shit about the political situation in Ukraine and its history, but you think you have it all figured out. I'm sure you don't even know your own history. So don't talk bullshit!

Re: pnpm: Fast, disk space efficient package manager for JavaScript

#148

Post by epolanski »

zkochan wrote: post #145
epolanski wrote: post #114

Earlier quoted context omitted.

There's different people in Russia too. No one is blocking US citizens because they dropped bombs killing 300 people shopping in markets or 200k civilians in Iraq or for the many abuses like Abu Grahib. Actually america has been by far the biggest aggressor on the planrt in tge last decades, and it killed the most civilians outside Africa. That's my problem with this massive anti russian hysteria in software. You onl…

You have the audacity to call it anti Russian hysteria, when I should hide from air raid attacks sometimes several times a day? Please don't use pnpm. Use Yarn or npm, those are better package managers for you.

I am sorry for that situation but my opinion does not change.

OS and politics should not be mixed. Your actions do nothing but say that you will "weaponize" an open source library to match one goal "punishing Russians" but not punishing other perpetrators.

If every software maintainer started to apply its own political views and ban some users the entire ecosystem would implode.

Should muslim developers ban all chinese users for the uighur concentration camps, and myanmaris for their treatment of Rohingya?

Should I, a Polish developer, ban Ukrainians because they hail as a hero and title streets to a criminal like Bandera that killed my own polish family in eastern galicia during world war two?

Where and when would this hysteria end?

I have sympathy for your situation, but not for such solutions. They damage everyone, including OSS.

Re: pnpm: Fast, disk space efficient package manager for JavaScript

#149

Post by tyrrrzhn »

throwaway0x7E6 wrote: post #122
zkochan wrote: post #88

Earlier quoted context omitted.

In the USA there are different people. Good and bad. There are states that are very conservative and there is California. There are some basic values that everyone agrees upon. I think nobody can claim that everyone is bad or good in the US. Same goes for any other democratic society. Same goes for Ukraine. There are a lot of people that I don't like in Ukraine. In Russia there are some good people but they are in ex…

Quoted post unavailable.

> Trump, the only president in recent history who did not start any wars

All of this "Trump is the ambassador of peace" rhetoric may almost convince you to forget that 90% of his electorate are gun-crazed maniacs.

Re: pnpm: Fast, disk space efficient package manager for JavaScript

#150

Post by ricardobeat »

jakubmazanec wrote: post #144
ricardobeat wrote: post #109

Earlier quoted context omitted.

As the post you shared yourself explains, peer dependencies were meant for plugins/extensions. It would make no sense for you to depend on “foobar” directly without having babel as a dependency already. If foobar can be used standalone, then babel is a standard dependency, not a peer dept.

Technically true, but not how it is actually done. People very often specify packages like Babel, React, TypeScript, GraphQL, etc. as peer dependencies even when they shouldn't. Anyway, in any case, auto installing peer deps solves both situations. There really is no reason to not auto install them.

There really is - not everybody is content with having 600MB of unused dependencies being pulled in for no reason. This approach slows things down, including CI, increases surface area for security risks and makes your dependency tree inscrutable. All to account for obviously wrong use of the package manager.
Post reply on HN