3 ms·
You can indeed reference a git repository with a single commit specified, like described in the npm install docs[1]. Not very user friendly, but it works. Ex
by Kovah 7y ago
You can indeed reference a git repository with a single commit specified, like described in the npm install docs[1].
Not very user friendly, but it works.
Example:
"dependencies": {
"myprivatemodule": "git+ssh://git@github.com:user/project.git#commit-hash"
}
[1] https://docs.npm.red/cli/install.html https://docs.npm.red/cli/install.html
- k__ 7y agoThis! plus treating every commit as major version and be done with it.
- Cthulhu_ 7y agoThat's a bit too idealistic; in practice, any commit MAY have a bug which passed quality control. The problem is that it's all down to people's discipline, it's not an enforced standard. A package manager where every release has to be reviewed, tested and approved before they become generally available would be a pretty interesting case, I know bigger companies who are reluctant to upgrade because of known bugs in the past would be willing to pay for something like that.