3 ms·
I thought the most important lesson here is that npm is a horrible single-point of failure with a terrible security track record and obtuse leadership, but has
by numbsafari 8y ago
I thought the most important lesson here is that npm is a horrible single-point of failure with a terrible security track record and obtuse leadership, but has somehow become the backbone of an entire ecosystem within our industry.
- drb91 8y agoThat’s one takeaway. There isn’t an alternative, though, so this isn’t actionable.
- swsieber 8y agoNo, it is actionable - create an alternative.
- drb91 8y agoPlease do! I cannot.
- flukus 8y ago> create an alternative Or maybe just adopt one of the dozens that have been around for longer than NPM in the first place.
- swsieber 8y agoWas there ever a real adoptable alternative to npm for node packages? I'm all ears for suggestions.
- flukus 8y agohttps://en.wikipedia.org/wiki/List_of_software_package_management_systems https://en.wikipedia.org/wiki/List_of_software_package_manag... There are many, most are open source, several have or could be ported to windows. What does npm offer that couldn't have been handled with an apt or rpm repository? The obsessions of reinventing everything in every language is a giant waste of time.