2 ms·
Um... was vendoring deleted packages for those packages that depend on the former too obvious? E.g.: 1) left-pad package (containing versions 1.0, 1.2 and 1.5)
by mixedCase 11y ago
Um... was vendoring deleted packages for those packages that depend on the former too obvious?
E.g.:
1) left-pad package (containing versions 1.0, 1.2 and 1.5) is being deleted by its author
2) Package X depends on left-pad 1.0 and package Y on left-pad 1.5
3) Packages $PREFIX-left-pad version 1.0 and 1.5 are created from copies of left-pad and X and Y dependencies updated to point to it. (PREFIX being vendor, old, deprecated, or whatever you want)
4) Original package is deleted (with version 1.2 no longer being available in the registry anywhere), and name will remain unavailable for either a) Forever b) # amount of months with potential adopters being able to express their desire of adoption.
Ta-da?
- yati 11y agoWhat about a local "internal/secret" package with a dep on left-pad v1.5? Redownloading all the deps (say, on a new box) will fail for left-pad 1.5, and someone has to go and change the dep manually to $PREFIX-left-pad?