3 ms·
Practically all packages use git sources. Yes, you can vendor them - congratulations, you just kicked the can down the road and moved the issue to the build ste
by Xylakant 12y ago
Practically all packages use git sources. Yes, you can vendor them - congratulations, you just kicked the can down the road and moved the issue to the build step. The issue exists for other languages as well - maven/mavencentral, ruby/rubygems.org - but only composer depends on github very much. I don't like that but it's not like the other solutions are much better.
- mercurial 12y agoMany companies mirror maven, so having mavencentral go down is not a big issue. Does composer make it possible to deploy a mirror of its dependencies?
- Xylakant 12y agoYou can use your own repository, so at least in theory that should be possible. I haven't done that in practice, so I can't comment any further.
- ksenzee 12y agoYes, certainly: https://getcomposer.org/doc/articles/handling-private-packages-with-satis.md https://getcomposer.org/doc/articles/handling-private-packag...