5 ms·
NPM website was down
- normie3000 5mo agoWell it is owned by github.
- saadn92 5mo agoha, github is down too
- xmprt 5mo agoWith all the github instability, I wonder if Cloudflare or some other provider is going to look into providing a similar service.
- sofixa 5mo agoGitLab is right there. And overall provides a better product than GitHub, if nothing else on these two points: * You can actually have an organisational structure (folders/namespaces), and projects can be moved around with automatic redirects. Also, inheritance of access controls, variables between the namespaces * GitLabCI is organised in a way that makes supply chain attacks less of a risk. GitHub Actions takes the NPM/JS approach, where every step is an action, one you usually need to get off someone, with shoddy versioning, tons of transient dependencies, etc. In GitLabCI you can have templates, but you don't have to use an external template for every bit. It's shell scripting on top of containers, so you can have custom container images with your stuff, or custom scripts, or templates that bundle it all.
- fontain 5mo agoAll of those features are supported by GitHub in some form, e.g: Organizations can now belong to Enterprises.
- dijksterhuis 5mo agotree based directory structure stuff is available on gitlab’s free tier — so are all the permissions inheritance for groups etc. so, while you’re technically right, these features are apparently paywalled heavily on github. ime you get more features on gitlab for the same price (or less). i switched fully two years ago and im not going back.
- sofixa 5mo agoIt's not the same, at all. SSO, access tokens, secrets are all bound to the Organization level - if you work on multiple Organizations you have to log in separately... You also cannot have nested Organizations.
- justinclift 5mo agoGitLab also limits the size of PRs/MRs, which makes it Unfit for Purpose. :( :( :( Its a problem they know about, but have no plan to fix before 2027.
- irishcoffee 5mo agoI mean, the PR limit is like a million characters. I would also reject a PR of a million characters. That’s bananas.
- justinclift 5mo agoNot sure about that "million characters", but we've been bitten by it in our production systems. :( Thus, we're moving off GitLab.
- irishcoffee 5mo ago
- dllrr 5mo agoCloudflare artifacts?? https://developers.cloudflare.com/artifacts/ https://developers.cloudflare.com/artifacts/
- xmprt 5mo agoI mean more like a full git competitor. Gitlab exists but more competition is generally better for the consumer and it looks like Github's lead is starting to falter with all these incidents.
- corvad 5mo agoI wonder if this is an underlying infra issue with Azure being that Github was also having issues.
- 2ndorderthought 5mo agoI bet 10 dollars it's DNS.
- corvad 5mo agoJust wait and it will be something like "Github's internal DNS was down and caused widespread service communication issues."
- Scipio_Afri 5mo agoEasy there buddy, not everything needs to be a polymarket bet :-)
- yomismoaqui 5mo agoIt's not DNS There's no way it's DNS It was DNS - SSBroski
- basilikum 5mo agoIt's DNS If it's not DNS it's MTU if you're a person and BGP if you're a company.
- Imustaskforhelp 5mo agoI am waiting for jeff geerling's "its always dns" t-shirt reference/video about it if that's the case.
- thanatos_dem 5mo agoNah, can't be, Azure DNS has a 100% SLA after all: https://learn.microsoft.com/en-us/azure/dns/dns-faq#what-is-the-sla-for-azure-dns- https://learn.microsoft.com/en-us/azure/dns/dns-faq#what-is-...
- cozzyd 5mo agoThat's one way to fix supply chain vulnerabilities.
- tantalor 5mo agoCan't have any vulnerabilities if you don't have a supply chain
- nine_k 5mo agoMore seriously, keeping a local cache of external npm packages, and a local artifact storage for internal npm packages looks like a wise thing to have done long ago. Might be cheaper in the long run. Ironically, both Nandu and Verdaccio are implemented in Tyepscript and install via npm. (Same logic obviously applies to Python packages, Docker images, etc.)
- miohtama 5mo agoOnly if we had a turn key distributed cache, like IPFS
- cluckindan 5mo agoWaiting for the BitTorrent package manager
- ibejoeb 5mo agoDoes IPFS support content eviction now? If not, that could go wrong really fast. You get a compromised package out there and then, I think, literally every node needs to unpin it or it remains.
- zadikian 5mo agoPresumably, how ever you mark a version as latest would also be how you mark one as compromised. IPFS files are immutable and keyed by hash. But this seems like overengineering.
- 5mo ago
- airstrike 5mo agohttps://www.ebay.com/ https://www.ebay.com/ is also down
- Raed667 5mo agolots of amazon pages & search seem to be degraded as well
- cute_boi 5mo agomicroslop slops are down.
- 12345hn6789 5mo agoAzure is completely dead across multiple resources. Confirming....
- DaiPlusPlus 5mo agohttps://azure.status.microsoft/en-US/status https://azure.status.microsoft/en-US/status says "There are currently no active events." - and everything's fine with my day-job's Azure sub right now.
- TesterVetter 5mo ago[dead]
- simjnd 5mo agohttps://npmx.dev https://npmx.dev is not
- naikrovek 5mo agoOh no. At least nothing of value is affected. :)
- idoxer 5mo agoWorks for me, could be region related
- corvad 5mo agoFixed as of 22:30 UTC. Hope there's a postmortem.
- squarefoot 5mo agoEbay is also down. https://www.isitdownrightnow.com/ebay.com.html https://www.isitdownrightnow.com/ebay.com.html
- dabinat 5mo agoTailscale too: https://status.tailscale.com/ https://status.tailscale.com/
- hexasquid 5mo agoHold the jokes until we're sure this isn't an `.unwrap()`
- iLemming 5mo agoFirst GitHub, now NPM? Oh no... That is happening, guys. Rise of the machines. I hope Jira is next and Slack follows.
- deleted 5mo ago[deleted]
- dmitrygr 5mo agolibc is still working just fine, as is the linux kernel. Mayhaps having 2000 dependencies on 3000 packages from 4000 unvetted sources was a mistake afterall?
- lrvick 5mo agoWhenever NPM is offline, the internet is a little safer. Keep up the good work Microsoft. Let's shoot for 100% downtime though. Thanks.