Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

GitHub Package Registry

github.com

Post reply on HN
Print view View original

21–30 of 389 posts

Re: GitHub Package Registry

#22

Post by mfatica »

passenger wrote: post #15

So what happens when a package on npm depends on a package on Github registry or vice versa?

The same way it works today when you utilize packages from multiple repositories. Github isn't the first non-npm repository in existence.

Re: GitHub Package Registry

#25

Post by sorahn »

selrond wrote: post #13

This could solve the trust issues with npm - you never know, whether the package you're installing is really from the source provided on its npm page

If you can just point at the github registry, and run `npm publish`, does that really solve the problem?

NPM's major problem is there's no official link between the package and the repo, any code/branch can be published, and unless I'm missing something, this doesn't really solve that issue.

Re: GitHub Package Registry

#26

Post by prh8 »

kissgyorgy wrote: post #21

GitHub is coming after GitLab :D They first started with Boards, then Github Actions and now with this.

What does Gitlab have that this is competing with? I know Gitlab's docker registry but not of a package registry.

Re: GitHub Package Registry

#27

Post by yingw787 »

This question might already be answered already, but who owns the built packages? Source code is released by license, but I don't know whether licensing compiled packages naturally inherit the same license from source.

What would GitHub do in the case of a `left-pad` situation?

https://www.theregister.co.uk/2016/03/23/npm_left_pad_chaos/

Re: GitHub Package Registry

#28

Post by ben_jones »

gigatexal wrote: post #14

This is pretty interesting. Github really is becoming the social network that MS never seemed to be able to create. We already use it as our portfolio of work for potential employers. We collaborate with fellow enthusiasts and maybe even make new friends. We host our websites from it. Abuse it to store binaries, too. And now, along side, source code we can use it as a CDN of sorts to serve packages, for free, sounds…

Or you know, it could just focus on its core competencies and be good (great?) at what it does. They don't need to eat the world to provide a positive impact to it...

Re: GitHub Package Registry

#29

Post by [deleted] »

ben_jones wrote: post #28
gigatexal wrote: post #14

This is pretty interesting. Github really is becoming the social network that MS never seemed to be able to create. We already use it as our portfolio of work for potential employers. We collaborate with fellow enthusiasts and maybe even make new friends. We host our websites from it. Abuse it to store binaries, too. And now, along side, source code we can use it as a CDN of sorts to serve packages, for free, sounds…

Or you know, it could just focus on its core competencies and be good (great?) at what it does. They don't need to eat the world to provide a positive impact to it...

[deleted]
Post reply on HN