3 ms·
Do you know if Facebook uses Composer to manage PHP dependencies?
by TekMol 5y ago
Do you know if Facebook uses Composer to manage PHP dependencies?
- klodolph 5y agoFacebook uses a monorepo, similar to the way Google does it. Dependencies are vendored and checked into the repo. Facebook has released a tool for migrating software between repos, which is much like Google's Copybara: Facebook's fbshipit: https://github.com/facebook/fbshipit https://github.com/facebook/fbshipit Google's copybara: https://github.com/google/copybara https://github.com/google/copybara With these tools, you can make fairly sophisticated choices about how you do vendoring. You can make the internal version look just like the public version, in terms of commit history. And you can export internal commits to public commits, stripping out confidential information along the way (or integrations with internal systems and tooling).
- TekMol 5y agoThanks for the infos! What does "Dependencies are vendored and checked into the repo" mean?
- bananapub 5y agohttps://stackoverflow.com/questions/26217488/what-is-vendoring https://stackoverflow.com/questions/26217488/what-is-vendori... ie copy software source into your own repository, ideally in such a way that you can keep it up to date (which is what shipit/copybara are for)
- dkasper 5y agoIt means you literally commit the code from the dependency into your own repo. https://stackoverflow.com/questions/26217488/what-is-vendoring https://stackoverflow.com/questions/26217488/what-is-vendori...
- deleted 5y ago[deleted]
- fredemmott 5y agoFacebook doesn't. Open source users of Hack do, and it uses packagist.org - however if a package is written in PHP, Hack code can't use it. Not 100% accurate, but if a package's composer.json does not require HHVM, it will most likely install into a hack project, but be unusable.