3 ms·
How immutable is this registry? What happens if the owner tries to remove their package, or rename it? or modify it? What if the owner deletes his/her account
by jopsen 7y ago
How immutable is this registry?
What happens if the owner tries to remove their package, or rename it? or modify it?
What if the owner deletes his/her account / organization, or renames user / organization?
The nice thing about many package managers is that they don't allow mutation, removal or renaming of packages.
So when you have a lock-file checked into git you can be sure you can fetch all the dependencies again.
- giancarlostoro 7y agoI dont think its intended to replace the main package managers as much as to ensure you can deliver a tool you may already be using (GitHub). Especially if you want to ensure you dont accidentally publish production code to one of those package managers e.g. NPM which had a whole debacle about that a few months or a year back.