Re:GitHub Package Registry Will Support Swift Packages
by giancarlostoro on Tuesday June 04, 2019 @07:55AM
(#20094081)
I dont think its intended to replace the main package managers as much as to ensure you can deliver a tool you may already be using (GitHub). Especially if you want to ensure you dont accidentally publish production code to one of those package managers e.g. NPM which had a whole debacle about that a few months or a year back.
What happens if the owner tries to remove their package, or rename it? or modify it? What if the owner deletes his/her account / organization, or renames user / organization?
The nice thing about many package managers is that they don't allow mutation, removal or renaming of packages. So when you have a lock-file checked into git you can be sure you can fetch all the dependencies again.