4 ms·

What does it do with packages that download binaries for specific architecture in the post script?

• madeofpalk 11mo ago
  You don't need post-install scripts for this. Use optionalDependencies instead https://github.com/nrwl/nx/blob/master/packages/nx/package.json#L88-L99 https://github.com/nrwl/nx/blob/master/packages/nx/package.j... Each of those deps contains a constraint installing only for the relevant platform.
  • halflife 11mo ago
    That’s cool, now I wish all libraries that need binaries would opt to use that instead of post script
    • zahlman 11mo ago
      Do keep in mind that the binaries are still binaries. Even if your installation process doesn't run any untrusted code from the package, you can't audit the binaries like you might the .js files prior to first run.
  • mook 11mo ago
    As far as I can understand from the documentation, that doesn't actually specify in that config that one of them is required, does it? That is, if they _all_ fail to install as far as the system is concerned there's nothing wrong? There will be runtime errors of course, but that's sort of disappointing…
• edoceo 11mo ago
  As stated, you manually approve them.