Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

GitHub Package Registry

github.com

Post reply on HN
Print view View original

71–80 of 389 posts

Re: GitHub Package Registry

#71

Post by smsm42 »

ccleve wrote: post #31

This is really outstanding. It will mean the death of Maven Central, about which I have mixed feelings. On the one hand, Sonatype deserves enormous thanks for what they have done for the open source world, as does mvnrepository.org. Their central repository has been free and maintained for a long time. Thank you, Sonatype. On the other hand, it took me three days to release a new version of one of my artifacts the ot…

I think you've been somewhat unlucky. I've been releasing some code on Maven Central for a while, and while original setup did take some time and was a bit confusing at times, once all keys were in place deploy works with a couple of short steps. It is true the packages do not appear immediately, but I imagine serving this much content requires heavy caching, so I can understand that, and the wait times aren't that outrageous either.

That said, would be interesting what Github's effort comes to. It's always better to have alternatives.

Re: GitHub Package Registry

#72

Post by mshockwave »

paulddraper wrote: post #68
ccleve wrote: post #31

This is really outstanding. It will mean the death of Maven Central, about which I have mixed feelings. On the one hand, Sonatype deserves enormous thanks for what they have done for the open source world, as does mvnrepository.org. Their central repository has been free and maintained for a long time. Thank you, Sonatype. On the other hand, it took me three days to release a new version of one of my artifacts the ot…

Have you tried Bintray? [1] It's made by JFrog (makers of Artifactory), it's been around for while, it supports lots of formats including harder ones like apt, and it makes package distribution about as easy as it can be. [1] https://bintray.com/

i believe a lot of Android packages are moving to JFrog

Re: GitHub Package Registry

#74

Post by Nullabillity »

jackfoxy wrote: post #33
gigatexal wrote: post #14

This is pretty interesting. Github really is becoming the social network that MS never seemed to be able to create. We already use it as our portfolio of work for potential employers. We collaborate with fellow enthusiasts and maybe even make new friends. We host our websites from it. Abuse it to store binaries, too. And now, along side, source code we can use it as a CDN of sorts to serve packages, for free, sounds…

Pure speculation, it would not surprise me to wake up someday and see MS has bought Stackoverflow. Given their direction of integrating the entire developer experience, it would make sense. MS is upgrading technical docs across the board, organizing and linking to SO content would make sense.

Have we been reading the same MSDN?

Re: GitHub Package Registry

#75

Post by YorickPeterse »

mceachen wrote: post #37
prh8 wrote: post #26

Earlier quoted context omitted.

What does Gitlab have that this is competing with? I know Gitlab's docker registry but not of a package registry.

Gitlab's CI pipelines look an awful lot like github's new Actions tab.

I think you mean the other way around, as GitLab CI has been around for years.

Re: GitHub Package Registry

#76

Post by Rapzid »

paulddraper wrote: post #68
ccleve wrote: post #31

This is really outstanding. It will mean the death of Maven Central, about which I have mixed feelings. On the one hand, Sonatype deserves enormous thanks for what they have done for the open source world, as does mvnrepository.org. Their central repository has been free and maintained for a long time. Thank you, Sonatype. On the other hand, it took me three days to release a new version of one of my artifacts the ot…

Have you tried Bintray? [1] It's made by JFrog (makers of Artifactory), it's been around for while, it supports lots of formats including harder ones like apt, and it makes package distribution about as easy as it can be. [1] https://bintray.com/

Their support is the worst. I anticipate a 4 day turn around if I ever need to contact them. Scary really.

Their Gradle plugin is pretty bad too; kinda ironic given their prominent position in the Android and Java community. But then, Gradle itself is crazy town so it's hard to blame them too much.

Re: GitHub Package Registry

#77

Post by jbergstroem »

foxylion wrote: post #47
prh8 wrote: post #26

Earlier quoted context omitted.

What does Gitlab have that this is competing with? I know Gitlab's docker registry but not of a package registry.

Yes, it has a package registry feature for NPM and Maven: Maven: https://docs.gitlab.com/ee/user/project/packages/maven_repos... NPM: https://docs.gitlab.com/ee/user/project/packages/npm_registr...

The NPM support is basically not more than a proof of concept. It cannot be used for anything production-like. https://twitter.com/eatingfoodbrb/status/1101461965036244993

Re: GitHub Package Registry

#78

Post by fjp »

milin wrote: post #57
luhn wrote: post #45

I'm disappointed it doesn't support Python. There's not a lot of options available for private Python package hosting, it would have been good to have another one.

jfrog's artifactory has nice support for python https://www.jfrog.com/confluence/display/RTF/PyPI+Repositori...

We use this where I work. I'm not the one managing it but I've never had a single issue as a user.

Re: GitHub Package Registry

#79

Post by owaislone »

gigatexal wrote: post #14

This is pretty interesting. Github really is becoming the social network that MS never seemed to be able to create. We already use it as our portfolio of work for potential employers. We collaborate with fellow enthusiasts and maybe even make new friends. We host our websites from it. Abuse it to store binaries, too. And now, along side, source code we can use it as a CDN of sorts to serve packages, for free, sounds…

> All they need now is a place to get coding questions answered

I think Github issues has already started doing that. Personally, I've been finidng more help from Github issues than Stack Overflow, plus I find myself asking questions or submitting bugs on GH a lot more than asking something on Stack Overflow. In fact, I've not asked anything on SO for years now.

Re: GitHub Package Registry

#80

Post by schneidmaster »

jrockway wrote: post #44

Do I want to use Github for this? I kind of like the npm model where they say "don't cache it, we guarantee as much capacity as you want to re-download packages". I use a lot of go modules, and each of our container builds ends up fetching them all. Github rate limits this and you have to either vendor the modules or provide a caching go module proxy (Athens, etc.). Meanwhile, npm just uses Cloudflare which seems hap…

> Github rate limits this

I would be shocked if GitHub rate limited this new package registry. They're just serving tarballs and static content, and it's a new system so they can fully architect it with scale in mind (i.e. a CDN). They rate limit current repository-related content because they have to dynamically generate most of it in response to requests (I assume they have caching here as well, but not static-file-behind-CDN level caching).

Post reply on HN