4 ms·
I've been writing Postgres extensions for a few years now (mostly in C and Python), and I have to say that an important contribution from companies like Tembo a
by fforflo 3y ago
I've been writing Postgres extensions for a few years now (mostly in C and Python), and I have to say that an important contribution from companies like Tembo and Omnigres is in the area of tooling and boilerplate. From workflows to Dockerfiles [0], that's important for the future of Postgres.
This has been discussed in the past [1], but the Postgres tooling ecosystem has been primarily C-Makefile—mailing list driven, and there used to be a lot of Makefile targets copy-pasting. Whenever major Postgres providers wanted to open source some of their extensions / sub-products. I still feel, however, that a lot of Postgres C-know-how is being slowly forgotten / lost, and I think it will be necessary again soon. Internal things as how Postgres handles varlena, StringInfo, JsonbValue, etc. The core abstractions that make Postgres work.
0: https://github.com/omnigres/omnigres/blob/master/Dockerfile https://github.com/omnigres/omnigres/blob/master/Dockerfile
1: https://redmonk.com/jgovernor/2023/10/10/postgres-the-next-generation-investing-in-the-next-generation-of-committers/ https://redmonk.com/jgovernor/2023/10/10/postgres-the-next-g...
- KingOfCoders 3y agoI think a (regulated, secure) npm for postgres would be great, that works from inside the postgres toolchain.
- snicol 3y agohttps://database.dev/ https://database.dev/ from Supabase does this :)
- fforflo 3y agoI'm not sure what regulated means (eventual consensus?), but I think *from inside the Postgres toolchain* is important. For context, there are a few efforts in progress. I'm sure there are more. - https://pgxman.com https://pgxman.com - https://pgt.dev https://pgt.dev - pgxn v2: https://github.com/orgs/pgxn/projects/1/views/1 https://github.com/orgs/pgxn/projects/1/views/1
- KingOfCoders 3y agoWith regulated I mean, curated by a group of postgres committers for example. I do think extensions inside postgres are very prone to supply chain attacks, so it should not be managed the way npm is.
- adobrawy 3y agoHow npm is regulated? Anybody can publish their package on npm as they can do on GitHub. There is no up-front review on npm. Only packages that are clearly harmful to the community are removed from npm.
- KingOfCoders 3y agoYes, as I wrote, npm is not regulated.
- eatonphil 3y agoConsider also the companies and work behind pgrx [0] and pgzx [1]: [0] https://github.com/pgcentralfoundation/pgrx https://github.com/pgcentralfoundation/pgrx [1] https://github.com/xataio/pgzx https://github.com/xataio/pgzx
- hardwaresofton 3y agopgrx IMO has been hugely transformative -- didn't know about pgzx, thanks for the pointer!
- fforflo 3y agopgrx has indeed been a turning point; hadn't noticed it went under a new roof though. The community owns a lot to the ZomboDB people.
- mdaniel 3y agoI thought I recognized xataio - they submitted pgroll a few months back https://news.ycombinator.com/item?id=37752366 https://news.ycombinator.com/item?id=37752366 (https://github.com/xataio/pgroll https://github.com/xataio/pgroll - Apache 2)