News for hackers. Stuff that matters.

A comment on Uv's killer feature is pulling in local dependencies. Parent comment

Re:Uv's killer feature is pulling in local dependencies by geethree on Sunday January 12, 2025 @09:29PM (#42679411)
To be fair your specific example is due to… well forking terraform due to hashicorp licensing changes.
[ Parent | on HN ]
Re:Uv's killer feature is pulling in local dependencies by mdaniel on Sunday January 12, 2025 @09:46PM (#42679527)
hcl is still MPLv2 https://github.com/hashicorp/hcl/blob/v2.23.0/LICENSE and my complaint is that the .go file has one import path but the compiler is going to secretly use a fork, versus updating the import path like a sane person. The only way anyone would know to check for why the complied code behaves differently is to know that trickery was possible

And that's not even getting into this horseshit: https://github.com/opentofu/hcl/blob/v2.20.1/go.mod#L1 which apparently allows one to declare a repos _import_ path to be different from the url used to fetch it

I have a similar complaint about how in the world anyone would know how "gopkg.in/yaml.v3" secretly resolved to view-source:https://gopkg.in/yaml.v3?go-get=1

[ Parent | on HN ]