News for hackers. Stuff that matters.
Re:Deno 1.0 by batmansmk on Wednesday May 13, 2020 @08:56PM (#23173861)
To be the rubber duck, if wiping the cache at each build is a risk to your CI, what could you do to keep your CI up?

1 - not wipe the cache folder at each build? It's easy and secure. Oh and your build will be faster.

2 - use a cached mirror of the deps you use? It's like 10min to put in place and is already used in companies that care about security and availability anyway.

3 - you have https://deno.land/x if you want to put all your eggs in the same npm basket

Re:Deno 1.0 by bgdam on Wednesday May 13, 2020 @09:35PM (#23174180)
Yes, I think I'd probably settle for solution number 2.

I still don't understand how this is better than NPM, and how Deno solves the horrible dependency management of Node, but maybe if I actually build something with Deno I'll get some answers.

Re:Deno 1.0 by mkolodny on Wednesday May 13, 2020 @11:30PM (#23174950)
From the post:

> [With NPM] the mechanism for linking to external libraries is fundamentally centralized through the NPM repository, which is not inline with the ideals of the web.

Re:Deno 1.0 by Rapzid on Thursday May 14, 2020 @12:17AM (#23175221)
> which is not inline with the ideals of the web

Subjective.

> Centralized currency exchanges and arbitration is not in line with the ideals of the web! - Cryptocurrency

Nek minute. Besides, let's get real here; they will just end up centralized on GitHub. How exactly is that situation much different than npm or any other language ecosystems library directory being mirror-able?

Re:Deno 1.0 by afiori on Thursday May 14, 2020 @03:21AM (#23176450)
The centralization of git on Github is completely different in nature from the centralization of Node packages on npm.

git does not require Github to be online to work, nor relies on Github existence for its functionality.

Re:Deno 1.0 by Rapzid on Thursday May 14, 2020 @01:30PM (#23182544)
I'm talking about the centralization of software packages(Go, Deno) on GitHub as it applies to dependency resolution.