4 ms·
I would be deeply surprised if AWS teams use public pypi. Much more reasonable would be to mirror public packages they use internally. What if a minor version
by vageli 7y ago
I would be deeply surprised if AWS teams use public pypi. Much more reasonable would be to mirror public packages they use internally.
What if a minor version change contains a relicensing of the library, for instance?
- Bartweiss 7y agoGood point. Presumably they're fixing versions, even companies on public registries should do that to avoid re-licensing issues, but it'd be an unreasonable legal & security risk. I guess my broader thought was that PyPi is a more reliable free offering than NPM because it's not focused on a 'premium' version for the biggest users. But that's different than AWS - presumably they're sponsoring it in a broader "making development accessible is good for AWS" sense.
- vageli 7y agoIt's funny because reflecting on this thread later, I got what you were getting in that: the mere fact that NPM offers a private registry means that they are having to split focus on the two offerings. I completely agree in that sense!