4 ms·
good luck to your friend with repeatable installations :P
by hn23 7y ago
good luck to your friend with repeatable installations :P
- JustSomeNobody 7y agoIf you need repeatable installations, wouldn't node be the wrong tool? I mean, you'd have to freeze everything yourself and then those libraries become _your_ problem. Ugh. That's a hell nobody wants.
- quickthrower2 7y agoYou’d just have a local cache, you can pull updates from authors if needed.
- chrisbroadfoot 7y agoTo be pedantic, it's "wouldn't npm be the wrong tool" (it isn't, necessarily, I believe lockfiles provide you with reproducible builds) Vendoring/copying them is another way to achieve this (and means you don't need to depend on npm or its lockfiles). Regardless, those libraries are your problem whether you vendor/copy them or not. Read more: https://research.swtch.com/deps https://research.swtch.com/deps
- news_hacker 7y ago"If you wish to make apple pie from scratch, you must first create the universe" - Carl Sagan the npm ecosystem takes this quite literally, for better or worse.
- stcredzero 7y agoI'll credit npm with this, truly, when there's a package for each one of the Peano postulates. (As an actual functional dependency.)