2 ms·

I wonder why your (entirely reasonable) comment got down-voted so much. This is exactly the risk why people prefer a distributed and decentralized internet over

• golf1052 7y ago
  I think people are tired of EEE being posted on every Microsoft related thread even though Microsoft has been a very different company for at least 10 years. I do agree with the concerns of open source consolidation though. We need to find better ways of supporting open source projects instead of having them being bought by "large company".
• zdragnar 7y ago
  The central repository is entirely optional when using npm the cli tool; many companies use a proxy repository (such as artifactory) to host their internal packages and cache public ones already. Anyone can already run their own, or install from remote git urls (not just github) as well. If the new organization undermines the community, the community can easily move. NPM the company has had a significant number of missteps, and them getting better oversight and removing the need to be profitable will likely be better for everyone in the long run.
  • rootlocus 7y ago
    Not that many companies had proxies when leftpad was taken down.
  • fxtentacle 7y ago
    With NPM now being an (indirect) part of Microsoft, I would expect them to introduce proprietary extension to the repository protocol (or something similar) in an attempt to lock the open source community into their hosting solution. And no, you cannot cleanly separate between an ecosystem-defining tool and the company that controls how said tool will behave after the next automated update.