3 ms·
in what way are they unreliable? both can be proxy-cached on your local network to remove external dependencies. both have ... uuuh... okay package managers (
by y4mi 8y ago
in what way are they unreliable?
both can be proxy-cached on your local network to remove external dependencies.
both have ... uuuh... okay package managers (poetry/pipenv for python, npm/yarn for node) with *.lock files to properly define their dependencies. How does this differ from maven/gradle?
honestly, i prefer the node/python package management. Maven/Gradle is just so incredibly extensible making it insanely powerful.. But it comes at the cost of complexity and developers being unable to actually understand whats happening.
- salex89 8y agoBecause some guy in some library used by a library in an SDK I use didn't set a fixed version for his dependency which has been updated and has a serious bug in it... My app isn't working. Now I have to go through my requirements and set the exact versions that worked last time we released, have an enormous requirements file, and I'll probably never touch it again and have stale dependencies. Yeah... I don't like pip
- EdwardDiego 8y agoCan't generate a lockfile if conflicting dependency requirements exist. I type pipenv install --skip-lock far too often.