News for hackers. Stuff that matters.
Re:Bundle Phobia: find the cost of adding an npm package to ... by sleavey on Monday December 18, 2017 @01:19PM (#15953837)
I didn't realise that others also actively avoid npm. I can't really place my finger on exactly why I do, but I guess it's somewhere between the cargo-cult mentality in Javascript (which makes me associate node packages with poor quality programming) and not seeing the point of having another package manager beyond what my distro provides.
Re:Bundle Phobia: find the cost of adding an npm package to ... by oboopfmlrmnmn on Monday December 18, 2017 @02:18PM (#15954488)
There is a big distinction between the purpose of your distro package manager and the purpose of a languange dependency manager such as npm, pip, rubygems, cargo or composer.

While the first is for installing applications on your system (and also used for c libraries, because c has no official dependency manager), the second serves much more specialized purposes tailored for the language, such as

- os-agnostic (imagine the work in getting all them distros update just one package)

- compiles/postprocesses dependencies in deterministic ways

- etc.

Re:Bundle Phobia: find the cost of adding an npm package to ... by busterarm on Monday December 18, 2017 @03:26PM (#15955147)
Any projects we do where npm packages are a dependency inevitably end up with frequent transient build failures. npm install will kick out with some warning or error that's buried well past the 4MB log limit from CircleCI. Rebuilding the project always works.

I haven't been able to determine if this is an NPM issue or CircleCI issue, but short research periods seem to indicate the former, and I find the availability of packages in the manager to be 'unreliable'. That's not really something that I want to deal with in software that is managing my dependencies, but that's the state of the world. Apt repositories have a tendency to do the same thing, actually.

Re:Bundle Phobia: find the cost of adding an npm package to ... by oboopfmlrmnmn on Monday December 18, 2017 @04:22PM (#15955641)
tried yarn?
Re:Bundle Phobia: find the cost of adding an npm package to ... by busterarm on Monday December 18, 2017 @04:44PM (#15955786)
Yup! It has been good, we're just not using it in production yet.