News for hackers. Stuff that matters.
Re:Pattern matching accepted for Python by rtpg on Tuesday February 09, 2021 @09:53PM (#26085279)
Struggling a bit with Python and JS-related packaging stuff recently, I'm also wondering: in a clean-room environment, what does good Python packaging look like? Is it "get a single binary" stuff?

PyOxidizer feels like the big win, but a part of me wonders if the original sin of allowing aribtrary code execution during installs really stops a "wrapper" tool from getting this right. https://pyoxidizer.readthedocs.io/en/v0.9.0/index.html

Re:Pattern matching accepted for Python by ampdepolymerase on Tuesday February 09, 2021 @11:12PM (#26085674)
The gold standard for dynamic interpreted language package management is Yarn, and to a lesser extent npm. They are both cross platform, allows for easy publishing and building of native code dependencies, and support each package having its own conflicting dependencies, which means you don't have to do SAT solving. Furthermore, the metadata is held outside of the package, so package selection is much quicker than Python which requires downloading the entire library first and parsing the requirements.
Re:Pattern matching accepted for Python by rurban on Wednesday February 10, 2021 @03:58PM (#26094699)
Nope, cpan still is the gold standard.

Packages are tested before installation, and there is no need for hacks like pyenv or broken ruby envs. It also plays nicely with vendor packaging. No sat solving needed, deps are resolved dynamically, powered by simple Makefiles, not special baroque and limited declarations syntax.

Re:Pattern matching accepted for Python by 1337shadow on Wednesday February 10, 2021 @07:13PM (#26096617)
> support each package having its own conflicting dependencies

So that you don't have to integrate upstream changes continuously... Not a way to build a sane ecosystem if you ask me.

> package selection is much quicker than Python

So is it because it downloads multiple versions of the same dependencies that it's so much slower than pip? Or is there more?

Re:Pattern matching accepted for Python by kaba0 on Wednesday February 10, 2021 @11:09AM (#26091014)
Is there a difference between package management for dynamic/static languages? Because without this arbitrary distinction npm is pretty much around last place on a ranking between package managers.