News for hackers. Stuff that matters.

A comment on Stop Building on Corporate-Controlled Languages. Parent comment

Re:Stop Building on Corporate-Controlled Languages by chomp on Wednesday January 18, 2023 @11:52AM (#34429231)
Golang out of the box aggregates and analyzes usage metrics of modules whenever they are downloaded.
[ Parent | on HN ]
Re:Stop Building on Corporate-Controlled Languages by mseepgood on Wednesday January 18, 2023 @12:14PM (#34429589)
Which package management system doesn't do this?
[ Parent | on HN ]
Re:Stop Building on Corporate-Controlled Languages by crtc on Wednesday January 18, 2023 @12:23PM (#34429740)
True, I quickly checked

https://rubygems.org/

https://www.nuget.org/packages

https://crates.io/

... they all show download statistics of their packages.

[ Parent | on HN ]
Re:Stop Building on Corporate-Controlled Languages by HideousKojima on Wednesday January 18, 2023 @01:29PM (#34430778)
Which also serves a useful purpose for devs, it's an easy way to avoid typosquatting by making sure you're not looking at a package with a similar name to the one you want but with only 2,000 views instead of 2,000,000
[ Parent | on HN ]
Re:Stop Building on Corporate-Controlled Languages by jeltz on Wednesday January 18, 2023 @01:21PM (#34430639)
On top of my head: CPAN and Debian's since both are distributed with mirrors not controlled by the the main project. It is possible that some mirrors save statistics but there is no aggregation of it. But, yes, most package manager servers track download statistics and as long as they throw away the IP addresses I do not see any harm.
[ Parent | on HN ]
Re:Stop Building on Corporate-Controlled Languages by jeltz on Wednesday January 18, 2023 @01:18PM (#34430598)
As long as they only store aggregates I cannot say that I see that issue.
[ Parent | on HN ]