4 ms·
Yeh it's definitely preferable to have one of the two developers your small startup can probably afford spending a good portion of their time rolling out, secur
by ilghiro 11y ago
Yeh it's definitely preferable to have one of the two developers your small startup can probably afford spending a good portion of their time rolling out, securing and maintaining your own infrastructure
- biggestbob 11y agoYeh cos those are two only two options available. Good thinking.
- bad_user 11y agoGitHub is not meant for distributing dependencies. Maven Central on the other hand is, the difference being that it is mirrored and if repo1.maven.org goes down, it's not a big deal and your project can still be built and deployed.
- wereHamster 11y ago.. until they become a target of a DDoS. Also, if GitHub is down you can still fetch your dependencies from somewhere else.
- JumpJumpJump 11y agoYou have not understood the concept of 'mirrored'.
- chopman 11y agoWell I guess all mirrors could get targeted. Also, what stops github from getting mirrors themselves?
- deleted 11y ago[deleted]
- satanrepents 11y agoAn internal GitLab install isn't that time consuming to maintain. Also: dat false dichotomy.
- modarts 11y agoFalse dilemma much? Private versions of most dependency repos exist (npm, maven, etc)