4 ms·
In practice modules will be available from sources that will have similar reliability to npm: github.com, unpkg.com, cdn.pika.dev, jspm.io, etc.
by nitsky 6y ago
In practice modules will be available from sources that will have similar reliability to npm: github.com, unpkg.com, cdn.pika.dev, jspm.io, etc.
- bgdam 6y agoWhich then raises the question - how is it better than NPM? If there are going to be centralized repositories (like NPM), and if I have to download my dependencies into a $DENO_DIR (like NPM), and if I am then loading these dependencies from local files (like NPM), how is it any different to NPM? Except for being less secure by default? This is starting to look like a case of being different just so you can say you're different.
- austincheney 6y agoNPM is a dependency management failure which is why you are ending up with hundreds of dependencies in the first place. It sounds like you want to reproduce that insanity in Deno. Deno is set up in such a way to dissuade you from the stupidity by default but allow it in very few steps if you cannot imagine a world without it. In my opinion this is Deno’s biggest selling point.
- bgdam 6y ago> Deno is set up in such a way to dissuade you from the stupidity by default but allow it in very few steps if you cannot imagine a world without it. Could you elaborate on this? Is it that Deno is against the whole 'small packages that do one thing well' principle and instead in favor of complete libaries? How exactly would it dissuade me from installing hundreds of dependencies?
- austincheney 6y agoThe default design style for a Deno application is that the application becomes a single file. Just like packages coming off Steam. This requires that dependencies are packaged into the application before it is distributed to others. The idea there is to include only what you need deliberately and it manage it as a remotely written extension of your application.
- bgdam 6y agoHaving a single executable file, makes distribution easier, but while I'm developing the app, I'll still have to manage all of it's dependencies right? How does Deno aid during development? > The idea there is to include only what you need deliberately and it manage it as a remotely written extension of your application. I have a node app, in which I deliberately only included the dependencies I need. The package.json lists exactly 8 dependencies. However, the node_modules folder already has 97 dependencies installed into it. The reason of course is that these are dependencies of dependencies of dependencies of dependencies. Wouldn't Deno have this same issue? Are the dependencies also distributed in compiled form as a single file akin to windows DLLs?
- nitsky 6y agoit's better because there will be more choice.
- riyakhanna1983 6y agoDoesn't this mean more opportunities to inject malicious code?
- austincheney 6y agoOnly if you tell your application to retrieve from untrusted locations.
- pknopf 6y agoNode supports node_modules, not npm. Anything can build the node_modules.
- searchableguy 6y agoI am always confused by deno folks. You can install from a git repository using yarn/npm. How is that not "decentralisation" And if you are importing single files from a remote url, I would question your sanity.
- nitsky 6y ago> install from a git repository using yarn/npm yep, that's basically the same. deno has the benefit of using the es module system like it is implemented in browsers.