4 ms·
Surely there has to be better ways of “vendoring” (including hosting your own package repository that doesn’t automatically pull new versions) than adding thous
by MortyWaves 2y ago
Surely there has to be better ways of “vendoring” (including hosting your own package repository that doesn’t automatically pull new versions) than adding thousands or maybe tens of thousands of files to the git repo?
- compootr 2y agoif it's dumb and it works it isn't dumb! another rather simple solution is a git mirror of each package, then point npm to a git url
- xdennis 2y agoIf my podcast memory serves, that's how Isaac (the NPM guy) said it was intended. You would `npm install` and then `git commit`. That's why npm didn't have a lock file back then. Git was the lock file.
- guappa 2y agoOn debian I do debdiff to see the differences between two source packages.