5 ms·

Even that isn't sufficient for archival purposes, which an academic journal should be aiming for.

• rsfern 4y ago
  What is missing? Is this confined to the software environment, or also covering like data accessibility and workflow documentation? Asking as a scientist interested in reproducible research. Julia has been so much better than python at least in terms of dependency hell, but I still rely on some python packages through PyCall and I feel like that isn’t handled as nicely as Pkg.jl…
  • msla 4y ago
    Just having references to the packages isn't enough, you also need the source code of the packages themselves.
    • ChrisRackauckas 4y ago
      It contains a reference to source code in the package server that is disconnected from the package author so it's retrievable in the event of a left-pad-like event. This is what's queried upon download in order to ensure that no funny business could lead to a security threat down the line either. It's kept on the package servers as an immutable source of truth referenced by the UUID and SHA.
    • adgjlsfhk1 4y ago
      that all works. The package manager tracks source code for every version of every package.