Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

NPM website was down

status.npmjs.org

Post reply on HN
Print view View original

41–50 of 65 posts

Re: NPM website was down

#41

Post by [deleted] »

sofixa wrote: post #25
xmprt wrote: post #4

With all the github instability, I wonder if Cloudflare or some other provider is going to look into providing a similar service.

GitLab is right there . And overall provides a better product than GitHub, if nothing else on these two points: * You can actually have an organisational structure (folders/namespaces), and projects can be moved around with automatic redirects. Also, inheritance of access controls, variables between the namespaces * GitLabCI is organised in a way that makes supply chain attacks less of a risk. GitHub Actions takes th…

[deleted]

Re: NPM website was down

#43

Post by hmokiguess »

nine_k wrote: post #28
cozzyd wrote: post #6

That's one way to fix supply chain vulnerabilities.

More seriously, keeping a local cache of external npm packages, and a local artifact storage for internal npm packages looks like a wise thing to have done long ago. Might be cheaper in the long run. Ironically, both Nandu and Verdaccio are implemented in Tyepscript and install via npm. (Same logic obviously applies to Python packages, Docker images, etc.)

At my former job we had a private registry that was a mirror of npm’s with an approval gate for packages devs would request and it would always pin versions

I took that for granted back then and just assumed it was standard enterprise policy

Re: NPM website was down

#45

Post by shakna »

thanatos_dem wrote: post #17
2ndorderthought wrote: post #8

Earlier quoted context omitted.

I bet 10 dollars it's DNS.

Nah, can't be, Azure DNS has a 100% SLA after all: https://learn.microsoft.com/en-us/azure/dns/dns-faq#what-is-...

"Always" up, but maybe not going where you expect. [0]

[0] https://arstechnica.com/information-technology/2026/01/odd-a...

Re: NPM website was down

#46

Post by justinclift »

irishcoffee wrote: post #40
justinclift wrote: post #38

Earlier quoted context omitted.

GitLab also limits the size of PRs/MRs, which makes it Unfit for Purpose. :( :( :( Its a problem they know about, but have no plan to fix before 2027.

I mean, the PR limit is like a million characters. I would also reject a PR of a million characters. That’s bananas.

Not sure about that "million characters", but we've been bitten by it in our production systems. :(

Thus, we're moving off GitLab.

Re: NPM website was down

#47

Post by parliament32 »

thanatos_dem wrote: post #17
2ndorderthought wrote: post #8

Earlier quoted context omitted.

I bet 10 dollars it's DNS.

Nah, can't be, Azure DNS has a 100% SLA after all: https://learn.microsoft.com/en-us/azure/dns/dns-faq#what-is-...

To be fair, it feels like the DNS service has been the most reliable part of our Azure infra. Never really had issues with it, whether with traffic or API calls.

Re: NPM website was down

#50

Post by dijksterhuis »

fontain wrote: post #29
sofixa wrote: post #25

Earlier quoted context omitted.

GitLab is right there . And overall provides a better product than GitHub, if nothing else on these two points: * You can actually have an organisational structure (folders/namespaces), and projects can be moved around with automatic redirects. Also, inheritance of access controls, variables between the namespaces * GitLabCI is organised in a way that makes supply chain attacks less of a risk. GitHub Actions takes th…

All of those features are supported by GitHub in some form, e.g: Organizations can now belong to Enterprises.

tree based directory structure stuff is available on gitlab’s free tier — so are all the permissions inheritance for groups etc.

so, while you’re technically right, these features are apparently paywalled heavily on github.

ime you get more features on gitlab for the same price (or less). i switched fully two years ago and im not going back.

Post reply on HN