3 ms·

Say more. My package.json is part of source code. I can manually write it myself and run `npm install` afterwards; or I can do both steps via a command. The en

by nawgz 4y ago

Say more. My package.json is part of source code. I can manually write it myself and run `npm install` afterwards; or I can do both steps via a command. The end result is identical: my package.json has a new package, and my local machine has a copy of that package somewhere too. Why wouldn't I use the command, exactly?

ElectricalUnion 4y ago
> The end result is identical Citation needed. Installing npm dependencies in different orders is not garanteed to be deterministic due to npm's package flattening and, before npm 8, plain broken dependency resolution strategy. The package-lock.json is essential to get the same mess that the initial developer got on the same order as his install. > and my local machine has a copy of that package somewhere too. On maven/gradle, like on pnpm, you get one copy of each library. Not 3000x copies of lodash spread around your disk.
- nawgz 4y ago
  > > The end result is identical > Citation needed. What do you mean? You cited it yourself: > Installing npm dependencies in different orders Fortunately, there is no difference in order between running it as a command and adding it and running `yarn install`, since you already had all the other packages locally either way. Anyways, these complaints are ridiculous, I'm sure I could dig into the past and find some broken Maven or Gradle resolutions. Let's see, 10 second time limit: > gradle.lockfile LOL wow. > 3000x copies of lodash spread around your disk LOL
kaba0 4y ago
Modifying text files that are human readable are a big no-no. Generating files that you never touch is absolutely ok (and is a huge thing in Java, mind you, starting from annotation processors).
- nawgz 4y ago
  > Modifying text files that are human readable are a big no-no. Silly absolutes are a big no-no. You don't use automatic code formatting!? Using commands to modify a literal list is fine.

by nawgz 4y ago

ElectricalUnion 4y ago

> The end result is identical Citation needed. Installing npm dependencies in different orders is not garanteed to be deterministic due to npm's package flattening and, before npm 8, plain broken dependency resolution strategy. The package-lock.json is essential to get the same mess that the initial developer got on the same order as his install. > and my local machine has a copy of that package somewhere too. On maven/gradle, like on pnpm, you get one copy of each library. Not 3000x copies of lodash spread around your disk.

nawgz 4y ago
> > The end result is identical > Citation needed. What do you mean? You cited it yourself: > Installing npm dependencies in different orders Fortunately, there is no difference in order between running it as a command and adding it and running `yarn install`, since you already had all the other packages locally either way. Anyways, these complaints are ridiculous, I'm sure I could dig into the past and find some broken Maven or Gradle resolutions. Let's see, 10 second time limit: > gradle.lockfile LOL wow. > 3000x copies of lodash spread around your disk LOL

kaba0 4y ago

Modifying text files that are human readable are a big no-no. Generating files that you never touch is absolutely ok (and is a huge thing in Java, mind you, starting from annotation processors).

nawgz 4y ago
> Modifying text files that are human readable are a big no-no. Silly absolutes are a big no-no. You don't use automatic code formatting!? Using commands to modify a literal list is fine.