Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

NPM website was down

status.npmjs.org

Post reply on HN
Print view View original

21–30 of 65 posts

Re: NPM website was down

#21

Post by DaiPlusPlus »

12345hn6789 wrote: post #13
cute_boi wrote: post #9

microslop slops are down.

Azure is completely dead across multiple resources. Confirming....

https://azure.status.microsoft/en-US/status says "There are currently no active events." - and everything's fine with my day-job's Azure sub right now.

Re: NPM website was down

#24

Post by nulltrace »

corvad wrote: post #5

I wonder if this is an underlying infra issue with Azure being that Github was also having issues.

We added a preflight curl against registry.npmjs.org before the install step in CI. Not surprising they went down together.

Re: NPM website was down

#25

Post by sofixa »

xmprt wrote: post #4

With all the github instability, I wonder if Cloudflare or some other provider is going to look into providing a similar service.

GitLab is right there. And overall provides a better product than GitHub, if nothing else on these two points:

* You can actually have an organisational structure (folders/namespaces), and projects can be moved around with automatic redirects. Also, inheritance of access controls, variables between the namespaces

* GitLabCI is organised in a way that makes supply chain attacks less of a risk. GitHub Actions takes the NPM/JS approach, where every step is an action, one you usually need to get off someone, with shoddy versioning, tons of transient dependencies, etc. In GitLabCI you can have templates, but you don't have to use an external template for every bit. It's shell scripting on top of containers, so you can have custom container images with your stuff, or custom scripts, or templates that bundle it all.

Re: NPM website was down

#28

Post by nine_k »

cozzyd wrote: post #6

That's one way to fix supply chain vulnerabilities.

More seriously, keeping a local cache of external npm packages, and a local artifact storage for internal npm packages looks like a wise thing to have done long ago. Might be cheaper in the long run.

Ironically, both Nandu and Verdaccio are implemented in Tyepscript and install via npm.

(Same logic obviously applies to Python packages, Docker images, etc.)

Re: NPM website was down

#29

Post by fontain »

sofixa wrote: post #25
xmprt wrote: post #4

With all the github instability, I wonder if Cloudflare or some other provider is going to look into providing a similar service.

GitLab is right there . And overall provides a better product than GitHub, if nothing else on these two points: * You can actually have an organisational structure (folders/namespaces), and projects can be moved around with automatic redirects. Also, inheritance of access controls, variables between the namespaces * GitLabCI is organised in a way that makes supply chain attacks less of a risk. GitHub Actions takes th…

All of those features are supported by GitHub in some form, e.g: Organizations can now belong to Enterprises.
Post reply on HN