Live data from Hacker News

Left-Pad (2024)

azerkoculu.com

201–210 of 224 posts

Re: Left-Pad (2024)

#201
post #66

Unix philosophy is "do one thing, do it well". Left-Pad forgot about the second part. For me it was surprising that so many projects used this naive implementation. Nonnaive implementation is faster and much smaller.

what would that nonnaive implementation look like?

Re: Left-Pad (2024)

#202
post #104

Earlier quoted context omitted.

> If NPM would have prevented the depublishing, he would have made a scene and in the worst case, they would have looked bad. I mean he says he asked them to remove all his packages, expecting them to do so gradually, following whatever mitigation strategy they felt appropriate (e.g. some kind of warning and fadeout process), and instead they gave him a script to do it immediately so he did that.

[flagged]

> That’s precisely why unpublishing an entire package/crate/gem is not a supported operation on any mainstream repository.

Every competent repository has a process for unpublishing. Sooner or later someone will upload something that someone else claims the copyright to, and then either you take it down when you get a DMCA notice or you lose your safe harbour.

Maybe you replace it with some sort of tombstone. Maybe you warn all the reverse dependencies first. But you have to have a way to remove content.

Re: Left-Pad (2024)

#203
post #198
post #160

Earlier quoted context omitted.

What about the time it cost you to search the internet, read the docs, and use the one from std? How many seconds does each variant take (with hot/cold memory cache?) And the behavior could also be worse, there is no guarantee of perfection. The last argument is too generic to offer any guidance. Why is it better for this function be duplicated?? Should it not be part of std to avoid uniqueness?

> Should it not be part of std to avoid uniqueness? > > > > (assuming the standard library doesn't include one already)

This doesn't address the should

Re: Left-Pad (2024)

#204
post #118

Earlier quoted context omitted.

I agree completely, but would say the same of your username.

Check this discussion: https://news.ycombinator.com/item?id=43867827

Responding to client requests can be nice, sure, but having to be available outside working hours is still awful, and that's the defining characteristic of what people usually mean by oncall.

Re: Left-Pad (2024)

#205
post #117

Earlier quoted context omitted.

Maven is incredibly well designed (and ironically gets nothing but hate for it), it's probably the hidden reason Java is so successful. Why does Maven exist, without the commercial compromises of NPM? Probably because Java has the well-funded, well-supported, but non-profit and community-oriented Apache foundation, which is something extremely rare and precious (and probably at least partly a lucky result of Java's c…

The operators of Maven Central deserve a lot of credit for their good stewardship. Unlike the NPM registry, Maven Central does not permit anyone to unpublish packages. Unlike the NPM registry, Maven Central requires verification of domain or forge account ownership to claim a namespace. These are good practices, and anyone seeking to create a central package registry would do well to at least consider this. Maven Cen…

All that is true, but I think the fact that Maven has supported multiple repos and proxy repos for decades is a significant factor. SonaType deserve credit for being good stewards, but it's also relevant that they have had real competition (e.g. jFrog ran a similar public repository until recently) and if they did ever behave badly then for many organisations it would be a 1-line change in their Maven config to switch, which creates rather different dynamics compared to NP, PyPi etc..

Re: Left-Pad (2024)

#206

Earlier quoted context omitted.

I mean, they have seen that NPM did ate their hats to bow to a company and they decided to not have it, and they removed their packages. Why the anger? Yes, they have asked NPM to remove all of their packages. It's on them. NPM didn't do it, but gave a tool to do it themselves. I deserted GitHub the day Copilot came online. I archived my repositories just because I didn't want broken links on comments and notes I hav…

[flagged]

[flagged]

Re: Left-Pad (2024)

#208
A closer look at the sequence of events makes it clear that the failures weren’t due to the package author.

He fulfilled his responsibilities as a author.

Re: Left-Pad (2024)

#209

Earlier quoted context omitted.

He had already given everyone a license to use his software. That’s what FOSS software is - the users are granted a license to use the software and it can’t be revoked, even if the author is throwing a tantrum.

Sure, but that license doesn't include the requirement to host in perpetuity, and anyway, I wouldn't expect a hobbyist to need to worry about this. If I decide to make my gamer-profile private / offline or something and that breaks your crawler, even though I previously granted unrestricted public access to that data, that's really not my problem.

Let’s not pretend he was hosting the software. Npm was.

No software developer or organisation will use a software repository that allows deletion of packages. That’s why it’s not a thing anymore.

If you think this “right” should exist, that’s a market niche for you to exploit. But you won’t, will you? Because like I said, no user wants this.

Re: Left-Pad (2024)

#210

Earlier quoted context omitted.

I mean, they have seen that NPM did ate their hats to bow to a company and they decided to not have it, and they removed their packages. Why the anger? Yes, they have asked NPM to remove all of their packages. It's on them. NPM didn't do it, but gave a tool to do it themselves. I deserted GitHub the day Copilot came online. I archived my repositories just because I didn't want broken links on comments and notes I hav…

[flagged]

Oh, I don't defend them. I'm just another person who's disagreeing with you. The only thing is their and my values align on some aspects, and we both disagree with you on the same issues more or less. I'm not here to defend anyone.

When I was writing these replies, there were no flagged comments, and if there were, I can see them, if I want. That's an option you can change. I'm sure you know this better than me. You're here since 2014, and I'm here since 2017. Our comment histories are open. You can check whether I'm a sockpuppet or not.

The MIT license doesn't tell anything about availability of the source. In fact, MIT licensed software doesn't have to be Open Source at all. I can get the source, modify, compile and distribute the binaries without the source code attached, and no one can compel me about opening the source code. That's a requirement set forth by GPL family, and even these say that source should be available for a reasonable amount of time, not indefinitely, and certainly not online. IOW, I can sell GPL software, without putting its source code online. The only obligation is to provide the source to the people who have gotten the software (i.e.: How RedHat operates).

My only example was not my Instagram photos. I have also talked about my GitHub repositories (which I am not deleting because of my personal reasons), and again, I'm not here to defend them. To reiterate, I'm a completely different human being who happens to disagree with you.

HN's no delete policy was there since I joined, and I agreed to this when I started participating here. If they do something which is against my values, I'll leave this place, too (like I left Reddit back in the day). I'm not afraid to put my values first. In fact, this is why I have replied to you this much. I'm putting forward my perspective and values, which is not defending someone. I'm a lone person, walking my own way.

Your prejudice and anger is blocking your view. Currently three comments of you are also flagged.

It's enough that you're reflecting your beliefs and prejudices to other people in the form of low-key insults. Also your tea is going cold. It's not polite to not aceept a friendship drink offered in good faith.

This is my last reply on this comment thread, because this is a new day, and I have to handle other matters, too. Without any hard feelings, I wish you the best of luck, and have a nice day.

See you around.

Post reply on HN