From mboxrd@z Thu Jan 1 00:00:00 1970 From: Giovanni Biscuolo Subject: Re: NPM importer Date: Thu, 22 Nov 2018 10:29:49 +0100 Message-ID: <875zwp1muq.fsf@roquette.mug.biscuolo.net> References: <87ftw7r14u.fsf@gnu.org> <878t1m1j57.fsf@roquette.mug.biscuolo.net> Mime-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512; protocol="application/pgp-signature" Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:49696) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1gPlJ9-0006bW-3J for guix-devel@gnu.org; Thu, 22 Nov 2018 04:29:59 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1gPlJ5-0003SP-20 for guix-devel@gnu.org; Thu, 22 Nov 2018 04:29:59 -0500 Received: from ns13.heimat.it ([46.4.214.66]:45258) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1gPlJ4-0003Rd-Rh for guix-devel@gnu.org; Thu, 22 Nov 2018 04:29:54 -0500 In-Reply-To: List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: "Guix-devel" To: Julien Lepiller Cc: guix-devel@gnu.org --=-=-= Content-Type: text/plain Content-Transfer-Encoding: quoted-printable Hi Guix, sorry: reading at today messages from swdebugia and your comments below I realize that mine was just noise from a packaging-ignorant :-S Julien Lepiller writes: [...] >> https://spin.atomicobject.com/2016/12/16/reproducible-builds-npm-yarn/ >>=20 >> is yarn a viable solution to the NPM packaging problems? [...] > How different is it to build an npm package and a yarn package? no difference > Could you elaborate a bit on your idea? I'm not able: I was mislead by the title of this article I cited https://spin.atomicobject.com/2016/12/16/reproducible-builds-npm-yarn/ "reproducuble builds" and "npm/yarn" seems like an oxymoron to me, now :-) > We can already build packages with our wip node-build-system, as long as= =20 > we have build- and run-time dependencies available. The real hard parts=20 > are: sometimes build-tools depend on what they build, there is just too=20 > many dependencies and some packages don't declare a license properly. ACK, now I finally understand the problems [...] thany you for your patience ciao Giovanni =2D-=20 Giovanni Biscuolo Xelera IT Infrastructures --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEERcxjuFJYydVfNLI5030Op87MORIFAlv2dw0ACgkQ030Op87M ORLVIQ//UbZwWx9k0xWgO5C/iUC0OlhOdjYAx6ifSYdH7iXllE2e00eRG7mUpF9G NF2PyRs/LM5Z2JwuqweSP0aoSk0Zn4a32X5CrnA3d7O5T5y8GxLn3oFWfnhhehT7 0BAt+IFPFHHsX9Yzf3hsNTmjwQqCq31vER+vbHblH78q7eE9bCQl7D2dz31sXaLT JmJ5ZV7Ytb8NWbYj3oBAk45VO9WOzUw0W5IuLf2IhmPA7fELdgSFZGQFdKgfc9/V wxF2DX8uLUMqJprAYOtu0Ro1cICWWHHOlOfXzFhFWSkHT4cM+7HYVcMxvCafe0C5 Pa+vxtWTSBIvIMi7yU7q3NdVNQIvAqOs5C13AWakEqh0fkxfqFeavuX42q5GPfaZ 9lWY3RYg9Mnku/FQtlpL3mvl+9e0QulWl85rOxc/AmsvMcVbz7C+qqCcUpAWv0LZ WUZFIJyhlLfARnCiRA80HtM6M93ttc0WR+If6C4li6uBNfXuwLFvPXFNRdZ011HB sw1EkbrjlfhAatqGcAsGIOXxt3IHtJmxY2vQIHRRsWCEXTWrhZTVc+8u0mJByq0e ratOhesgnw7Sa5Tt86GYM6XTa9JCtMxV7tsnLrezvYIioJXUzmrwhsYFd/CW0Sk6 i+410SlFBIZYrsRdagPaEh9apC488QGmdRqHARPoThuHM91rac4= =t3rI -----END PGP SIGNATURE----- --=-=-=--