4 ms·

To me, that looks like an angry unicorn ... does that mean it's another DDoS? It would also be interesting to track loss of productivity in the software engine

by smoyer 12y ago

To me, that looks like an angry unicorn ... does that mean it's another DDoS? It would also be interesting to track loss of productivity in the software engineering professions when GitHub is down. Is this a single point of failure for your company?

sbarre 12y ago
Not just for a company, but for developer productivity in general, professional or not... Think of all the package managers that pull straight from Github repos as part of their installation processes..
- smoyer 12y ago
  Exactly ... we've got Ansible scripts that do that. One of the current Java rockstars (not my description), Adam Bien, recommends pulling the source code for all third-party dependencies to build them locally and put them in a local repository. I suppose you can push directly back upstream to avoid having an extra step.
  - sbarre 12y ago
    For OS-level package management like Apt or Yum this is less of an issue, but for things like Composer, Gem, NPM and the like, is the concept of "closest available mirror" even a thing? I guess for mission critical applications you could have a local mirror of all your vendor package dependencies (probably not a bad idea) but I would bet most people don't do that (I don't)..
  - flipp3r 12y ago
    If you're using Java most of the build tools use the Maven repositories, for which you can set up a local mirror too. The company i work for runs a Sonatype Nexus so we're not really affected by others' downtime unless we need stuff that we hadn't ever used before.
    - smoyer 12y ago
      Yes, for our Java projects we have a Nexus repository which mirrors everything locally. It doesn't protect us from someone deleting a project ... then we're stuck on the last available version without a way to address issues, but it's worked pretty well so far.
Already__Taken 12y ago
It's just git you'd go and get the code from literally anywhere else its being used.
- jarofgreen 12y ago
  I was trying to run composer ... and many composer packages are hosted directly on GitHub. Also, issues, pull requests ...

by smoyer 12y ago

sbarre 12y ago

Not just for a company, but for developer productivity in general, professional or not... Think of all the package managers that pull straight from Github repos as part of their installation processes..

smoyer 12y ago
Exactly ... we've got Ansible scripts that do that. One of the current Java rockstars (not my description), Adam Bien, recommends pulling the source code for all third-party dependencies to build them locally and put them in a local repository. I suppose you can push directly back upstream to avoid having an extra step.
- sbarre 12y ago
  For OS-level package management like Apt or Yum this is less of an issue, but for things like Composer, Gem, NPM and the like, is the concept of "closest available mirror" even a thing? I guess for mission critical applications you could have a local mirror of all your vendor package dependencies (probably not a bad idea) but I would bet most people don't do that (I don't)..
- flipp3r 12y ago
  If you're using Java most of the build tools use the Maven repositories, for which you can set up a local mirror too. The company i work for runs a Sonatype Nexus so we're not really affected by others' downtime unless we need stuff that we hadn't ever used before.
  - smoyer 12y ago
    Yes, for our Java projects we have a Nexus repository which mirrors everything locally. It doesn't protect us from someone deleting a project ... then we're stuck on the last available version without a way to address issues, but it's worked pretty well so far.

Already__Taken 12y ago

It's just git you'd go and get the code from literally anywhere else its being used.

jarofgreen 12y ago
I was trying to run composer ... and many composer packages are hosted directly on GitHub. Also, issues, pull requests ...