News for hackers. Stuff that matters.

A comment on What, why and how of PHP Composer. Parent comment

Re:What, why and how of PHP Composer by viraptor on Thursday June 14, 2018 @04:06AM (#17310170)
Things disappear, or get deleted, or old versions get replaced for various reasons. There's no "reliable dependency". Even if you think something's reliable, sone deeper dependency may disappear. See npm and left-pad for example.

Committing vendor directory may or may not be a good idea. But having your own copy of all dependencies (current and past) is necessary.

[ Parent | on HN ]
Re:What, why and how of PHP Composer by marenkay on Thursday June 14, 2018 @04:23AM (#17310226)
> But having your own copy of all dependencies (current and past) is necessary.

Definitely! Git mirrors are cheap, and there are various solutions for composer proxies out there. If you consider CI/CD you will want freedom from external calls anyway.

[ Parent | on HN ]