News for hackers. Stuff that matters.
Re:Rust Without Crates.io by oblio on Tuesday November 14, 2023 @07:54AM (#38262704)
Everyone is focusing on Nexus Firewall. Nexus/Artifactory themselves are private repos/proxies/caches that are in widespread use in the Java world so up to a point most companies prune their own repos.

This is NOT standard practice in the JS/Python/PHP/whatever world because these products do not exist or are not widely available, everyone "drinks" directly from the open internet source.

Yes, again, solutions exist, technically, but how many companies do you know, especially smaller ones, that do this?

For Java almost every company bigger than 5 devs tends to set up their own Maven repo at some point, many do it on day 1 because at least 1 dev is familiar with this practice from their former BigCo and it's easy to set up Nexus/Artifactory.

Re:Rust Without Crates.io by claudex on Tuesday November 14, 2023 @09:05AM (#38263402)
Artifactory works well with as a proxy for pip for Python
Re:Rust Without Crates.io by oblio on Tuesday November 14, 2023 @09:06AM (#38263425)
Yeah, I know that these days they can do everything, but the cultural bias is there.

The average Java dev will try to reach for Artifactory/Nexus much sooner than the average Python/Ruby/PHP/Javascript/... dev, in my experience.

Re:Rust Without Crates.io by pjmlp on Tuesday November 14, 2023 @12:56PM (#38266891)
Only because of company culture, in most enterprise projects I work on, doesn't matter the stack, everything gets legal and IT approvement into the internal Nexus.

Devs might do whatever they feel locally, however if those files are going through CI/CD their dependencies better be in Nexus.

Re:Rust Without Crates.io by TeeMassive on Tuesday November 14, 2023 @07:06PM (#38271618)
We use Artifactory as a PyPI mirror and a private package index and it works really great.