Live data from Hacker News

NPM Is Joining GitHub

github.blog

501–510 of 588 posts

Re: NPM Is Joining GitHub

#501
post #492

Earlier quoted context omitted.

So by your definition if you call someone an idiot and they punch you in the face for saying that, you don’t have freedom of speech? Right. It’s freedom of consequences from a specific entity, the government , not freedom from consequences in general .

Re 1: Yes. Re 2: No. It's just the usual implementation.

An absolutist definition like that is completely and utterly meaningless unless the only person you talk to is yourself. And even then there are concequences for what you say to yourself, even though they might not be externally visable immediately. And if you want to get really ridiculous concequences of saying anything involve movements of air and possibly particles of spit. Maybe even spreading an infection.

So by your definition freedom of speech cannot exist, or you need to refine your meaning of "concequences". That refined meaning is accepted as conceqences from the government.

Any other meaning is senseless because people are free agents and may respond to your speech in any way they feel fit.

Re: NPM Is Joining GitHub

#502

Microsoftie here — throwaway for obvious reasons. Microsoft doesn’t do everything right but the GitHub acquisition has honestly gone better than I ever expected. Rather than forcing GitHub to adopt Microsoft centric policies, Microsoft has adopted more GitHub stuff, especially from a product POV. GitHub still runs as a separate company (different logins and health care and hiring systems) with its own policies and po…

GitHub is still a good choice, but working with their more recent APIs, like GitHub Actions, I feel Microsoft's touch. They're slowly changing for the worst.

The Github acquisition was pretty recent, no? It seems like Actions is something that Github would have planned and been working on for some time prior to that.

Re: NPM Is Joining GitHub

#503
post #469
post #372

Earlier quoted context omitted.

The alternative is that the entire source control system (GitHub) and the entire artifact registry (npm) are run by a giant multinational military defense contractor with close and longstanding ties to the US military. Did we forget so soon that the Snowden slides are PowerPoint ? I'm not sure that's an improvement in any way whatsoever.

> Did we forget so soon that the Snowden slides are PowerPoint? what does that mean? That Microsoft works for the NSA or something?

Microsoft does indeed work for and with the NSA. As an ASP they participate in the warrantless PRISM bulk collection program (they were the first!), and they also provide software and services (support) as a direct vendor.

Re: NPM Is Joining GitHub

#504

Earlier quoted context omitted.

> after we saw what happened to yarn I missed something, what happened to Yarn?

The maintainer released Yarn 2. Yarn 2 is pretty foundationaly different than Yarn 1, and can and does break a lot of products/projects if used. Some folks are not happy about it, although Yarn 1 will probably continue to be maintained by the community for a while. This seems to be pretty fair about the whole thing: https://shift.infinite.red/yarn-1-vs-yarn-2-vs-npm-a69ccf022...

The review you cite compares yarn 1 to npm and declares yarn 1 the winner. They did not evaluate yarn 2 because they say it does not yet support react native without a plugin.

Re: NPM Is Joining GitHub

#505

Microsoftie here — throwaway for obvious reasons. Microsoft doesn’t do everything right but the GitHub acquisition has honestly gone better than I ever expected. Rather than forcing GitHub to adopt Microsoft centric policies, Microsoft has adopted more GitHub stuff, especially from a product POV. GitHub still runs as a separate company (different logins and health care and hiring systems) with its own policies and po…

> after we saw what happened to yarn

What happened with yarn? As a very casual user of it, it seems to work well and have pushed npm to innovate a bit when it was stagnating. But I haven’t followed it lately. Were there technical issues or political drama?

Re: NPM Is Joining GitHub

#506

Earlier quoted context omitted.

To me it looks like water that isn't wet. PR (propaganda) and time will improve their reputation, but the "commodify your compliment" strategy, the intent to dominate markets through anticompetitive behavior... Those things aren't gone. Big tech companies (like most big business) don't prioritize public good over profit, so they really don't deserve anyone's trust apart from trusting them to seek profit.

Maybe. But until someone comes up with a competitive alternative, that is a mood point.

It's "moot"

Re: NPM Is Joining GitHub

#507
post #372

Earlier quoted context omitted.

It depends on what the alternative is. When NPM starts running out of money to run the service what would happen? More VC, but only to a point and the firms would be increasingly be influencing NPM to make money by any means(probably not good for anyone but the firms). Alternatively a cash strapped NPM fails to invest in security and availability of the service leading to widespread outages or worse a large scale sup…

The alternative is that the entire source control system (GitHub) and the entire artifact registry (npm) are run by a giant multinational military defense contractor with close and longstanding ties to the US military. Did we forget so soon that the Snowden slides are PowerPoint ? I'm not sure that's an improvement in any way whatsoever.

The military is a MS customer, just like nearly everyone else on the planet. Calling them a “defense contractor” is a very long stretch.

Re: NPM Is Joining GitHub

#508

Microsoftie here — throwaway for obvious reasons. Microsoft doesn’t do everything right but the GitHub acquisition has honestly gone better than I ever expected. Rather than forcing GitHub to adopt Microsoft centric policies, Microsoft has adopted more GitHub stuff, especially from a product POV. GitHub still runs as a separate company (different logins and health care and hiring systems) with its own policies and po…

> Microsoft doesn’t do everything right but the GitHub acquisition has honestly gone better than I ever expected. Rather than forcing GitHub to adopt Microsoft centric policies, Microsoft has adopted more GitHub stuff, especially from a product POV. GitHub still runs as a separate company (different logins and health care and hiring systems) with its own policies and point of view. That's what we said about the Skype…

I'm not at Microsoft anymore but I was there when Skype got acquired and I had a bunch of friends who worked on it.

You have to understand that the technology underlying Skype at the time was very brittle and poorly designed.

Google almost bought Skype before Microsoft did and backed out after they got a look at the code.

When Microsoft acquired it Skype was routing its traffic over port 80 for example.

Re: NPM Is Joining GitHub

#509

Microsoftie here — throwaway for obvious reasons. Microsoft doesn’t do everything right but the GitHub acquisition has honestly gone better than I ever expected. Rather than forcing GitHub to adopt Microsoft centric policies, Microsoft has adopted more GitHub stuff, especially from a product POV. GitHub still runs as a separate company (different logins and health care and hiring systems) with its own policies and po…

GitHub is still a good choice, but working with their more recent APIs, like GitHub Actions, I feel Microsoft's touch. They're slowly changing for the worst.

Really I feel competition with Gitlab which is pushing Github to do things like Actions that they should have done for a long time.

Re: NPM Is Joining GitHub

#510

VsCode, Typescript, Github, NPM. And Microsoft doesn't even have to maintain the main runtime, Google does. What a clever strategy!

Yes, they almost own the entire JS ecosystem at this point. They lost a decade of battles for the web, but it seems they just found a way to get back in the fight. Now at the IE 6 times, that meant monopoly, and it was terrible news. But today, it means more competition between the giants, which is very good for us.

I think it's important to remember that IE6 was an amazing browser when it was first released.

The problem is that it was left to stagnate after Microsoft won.

Post reply on HN