pnpm: Fast, disk space efficient package manager for JavaScript

Post by kaba0 » Wed, Apr 06, 2022, 4:39 PM UTC

fiddlerwoaroof wrote: post #95

CraigJPerry wrote: post #89

Earlier quoted context omitted.

>> maven just picks an arbitrary one as _the_ version No that’s never been the case. If you have conflicting versions of a dependency in your dependency graph, maven chooses the “nearest neighbour” version - it selects the version specified least far away from your project in the transitive dependencies graph. Pinning a particular choice is easy too - you just declare the dependency and specify the version you want i…

This is what I mean by an arbitrary version: it’s not determined by the dependency but by some characteristic of the dependency tree. And, this is only necessary because the JVM can’t load two versions of the same dependency (ignoring tricks like the maven-shade-plugin)

Post by zkochan » Wed, Apr 06, 2022, 5:05 PM UTC

ttybird2 wrote: post #156

zkochan wrote: post #88

Earlier quoted context omitted.

In the USA there are different people. Good and bad. There are states that are very conservative and there is California. There are some basic values that everyone agrees upon. I think nobody can claim that everyone is bad or good in the US. Same goes for any other democratic society. Same goes for Ukraine. There are a lot of people that I don't like in Ukraine. In Russia there are some good people but they are in ex…

"Even the liberals in Russia are supporting the annexation of Crimea" - Supporting an annexation that has already happened is not the same as supporting a war. - That being said, even the liberals in the US supported the various invasions and occupations. Don't forget that Libya happened under Obama. - Even the liberals in Turkey are supporting the annexation of northern Cyprus, even the liberals in China support the…

Post by jakubmazanec » Wed, Apr 06, 2022, 6:49 PM UTC

ricardobeat wrote: post #150

jakubmazanec wrote: post #144

Earlier quoted context omitted.

Technically true, but not how it is actually done. People very often specify packages like Babel, React, TypeScript, GraphQL, etc. as peer dependencies even when they shouldn't. Anyway, in any case, auto installing peer deps solves both situations. There really is no reason to not auto install them.

There really is - not everybody is content with having 600MB of unused dependencies being pulled in for no reason. This approach slows things down, including CI, increases surface area for security risks and makes your dependency tree inscrutable. All to account for obviously wrong use of the package manager.

Post by throwaway0x7E6 » Thu, Apr 07, 2022, 1:35 AM UTC

ttybird2 wrote: post #161

zkochan wrote: post #146

Earlier quoted context omitted.

> US-backed color revolutions - including the one in your very own country, I see I hope you won't use pnpm and we won't speak again.

As much as you disagree with it, posting it on twitter to harass and get your followed to dunk on that person is not acceptable. https://twitter.com/ZoltanKochan/status/1511638290608308228 Also please do not misunderstand, people mention the US acts in order to point out the hypocrisy shown, not to justify the invasion.

Post by rplnt » Thu, Apr 07, 2022, 8:27 AM UTC

kaba0 wrote: post #159

kall wrote: post #90

I'm pretty immune to most JS ecosystem churn, but on package managers I'm feeling it. All I want is a package manager that is correct, causes very few day to day issues and is going to work the same way for many years. Yet everyone seems to be optimizing disk usage and speed without even getting the basics (make it work, make it right) fully covered. I don't understand why people are optimizing for disk space at all…

Other than the biggest OS pretty much choking on the node_modules black hole whenever you do a global operation on it (try deleting a js project on Windows)