Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

NPM Is Joining GitHub

github.blog

Post reply on HN
Print view View original

341–350 of 588 posts

Re: NPM Is Joining GitHub

#341

Post by thu2111 »

judge2020 wrote: post #159
allover wrote: post #144

Earlier quoted context omitted.

Tbf Microsoft have won back a lot of good faith with developers due to projects like VS Code and TypeScript, even for those of us who remember their past. And we're yet to hear of any negative impact of their Github acquisition (afaik - correct me if wrong).

Before someone else comes along and writes a monologue, the biggest downside might be how it handled (didn't break) its contract with ICE[0]. If the acquisition didn't happen, old GitHub might've dropped the contract immediately upon enough employees speaking about it. 0: https://news.ycombinator.com/item?id=21412600

Others see that as an upside. ICE today, who knows what tomorrow. The sort of activists who wanted that have all kinds of random targets. No company wants to deal with suppliers suddenly blacklisting them because the hard left decided they're evil.

Re: NPM Is Joining GitHub

#343

Post by kevingadd »

judge2020 wrote: post #159
allover wrote: post #144

Earlier quoted context omitted.

Tbf Microsoft have won back a lot of good faith with developers due to projects like VS Code and TypeScript, even for those of us who remember their past. And we're yet to hear of any negative impact of their Github acquisition (afaik - correct me if wrong).

Before someone else comes along and writes a monologue, the biggest downside might be how it handled (didn't break) its contract with ICE[0]. If the acquisition didn't happen, old GitHub might've dropped the contract immediately upon enough employees speaking about it. 0: https://news.ycombinator.com/item?id=21412600

Lots of big tech firms are government contractors, and as we've seen most of them are unwilling to drop government contracts (ICE, DARPA, etc). So this problem would arise with almost any large benefactor. I would've liked to see GitHub drop ICE though, personally.

Re: NPM Is Joining GitHub

#344

Post by greggman3 »

mbesto wrote: post #252
K0nserv wrote: post #14

This seems like a good outcome overall. NPM being such an important pillar in the software supply chain while having an unviable business model and largely being funded by VC money was never a good position to be in. There are problems with more of the software ecosystem consolidating with a single entity but it still feels like an improvement.

> NPM being such an important pillar in the software supply chain while having an unviable business model and largely being funded by VC money was never a good position to be in. Why does NPM need to be funded as a commercial entity at all? What other open source library has a private company running its package manager? This one still boggles my mind.

Confused why you think a service servings millions or billions of requests a day wouldn't require money to run. Do you think some grant magically appear out of thin air to pay for the servers, storage, bandwidth, and maintenance?

Re: NPM Is Joining GitHub

#346

Post by pgt »

crispinb wrote: post #271
pgt wrote: post #236

Earlier quoted context omitted.

This is the curse of globalist behemoths. Small companies is where it's at. Localism.

Nonsense. There is hardly a local government in Australia not hopelessly corrupted by local real estate interests. In many nations local corruption is endemic right down to every neighbourhood police station. Size isn't the question: money's corruption of power operates at all scales.

Size is absolutely the question. There is always corruption, but in small municipalities at least the scale of corruption is contained. In a sufficiently local area the corrupt has to brush shoulders with his unwilling benefactors and be shamed.

Re: NPM Is Joining GitHub

#348

Post by tdumitrescu »

skrebbel wrote: post #153

Assuming this was an acceptable exit: I'm impressed that NPM pulled this off. They were basically doing the "no revenue model to speak of, hope we'll get acquired by a bigco" startup play that was starting to go out of vogue already when they were founded. I wonder to what extent they've had influence over their own success at all though. Basically they had to hope that JS stayed popular (it did), that Node stayed re…

Here's what isaacs writes in the NPM blog post (https://blog.npmjs.org/post/612764866888007680/next-phase-mo...). It doesn't seem like anyone on the NPM team did great financially from this:

"I have a set of goals that I wrote down back then, and have shared openly with the team.

...

3. Get a big enough exit that I can quit my job and see what comes out of me a second time. 4. Share the rewards equitably with the people who got npm to where it is.

...

On (3), well, I’m still working a jobby job, but I always knew that was a long shot, and “make npm a better package manager” is a job I enjoy. And as for (4), I’m proud of the deals that we’ve been able to negotiate for the team.

It’s not a kajillion billion dollar 10x startup cinderella story, and we’ve taken our hits, but in the end we’ve done right by our community, team, and careers, and I’m extremely proud of what we’ve achieved."

Re: NPM Is Joining GitHub

#349

Post by monadic2 »

timrod wrote: post #277
mbesto wrote: post #252

Earlier quoted context omitted.

> NPM being such an important pillar in the software supply chain while having an unviable business model and largely being funded by VC money was never a good position to be in. Why does NPM need to be funded as a commercial entity at all? What other open source library has a private company running its package manager? This one still boggles my mind.

For programming languages, there are several examples of commercially run package managers: - the Java/Kotlin/Scala ecosystem is based around maven central, which is run by Sonatype, Inc. - Go modules are hosted by Google. Previously, most libraries were hosted on Github - Rust's crate index is on Github - The Docker/Moby registry is run by Docker, Inc. (though that might be a stretch for "package manager" :))

I wasn’t aware that I was a commercial entity because I use github!

Re: NPM Is Joining GitHub

#350

Post by RMPR »

cmroanirgo wrote: post #234
epicide wrote: post #154

Earlier quoted context omitted.

What does a trustworthy Microsoft look like to you?

Sightly off topic, but relevant to your question. Recently I installed win10 pro and was appalled at the way I had you jump through hoops to NOT have a m$ account, not to mention the blatant adware. And this was win10 professional. It certainly reminded me that m$ is a long long way away from where it was in the 90s and early naughties. So, a good start would be a stable and private os without all the adware and tele…

You can use vscodium, which is basically vscode without telemetry
Post reply on HN