4 ms·

Nimph has had lockfiles for months. https://github.com/disruptek/nimph https://github.com/disruptek/nimph

• FRidh 6y ago
  Thanks! I was only aware of Nimble. I'll have a look at it. One thing I noticed right away that it seems to be lacking (judging from the `nimph.json` assuming that is the lock file) are checksums over the data or hashes of revisions the references correspond to. References such as tags are mutable, and thus hashes are needed to validate them. See e.g. the discussion over at https://github.com/NixOS/nix/pull/3216 https://github.com/NixOS/nix/pull/3216.
  • disruptek 6y ago
    Please open an issue if you want to change the semantics; it's trivial to use the hash instead.
    • FRidh 6y ago
      Done! https://github.com/disruptek/nimph/issues/138 https://github.com/disruptek/nimph/issues/138