From mboxrd@z Thu Jan 1 00:00:00 1970 From: Brett Gilio Subject: Re: NPM importer Date: Wed, 21 Nov 2018 23:43:54 -0600 Message-ID: <87k1l5zmxx.fsf@posteo.net> References: <70F182DB-C157-4763-A4C6-89985545661C@lepiller.eu> <0e5afb2d-c182-6be4-ba2d-6a6f7dd45ac9@riseup.net> <1150DF84-4952-4401-A8D0-3E05A4D0EB74@lepiller.eu> <23f36a0d-a5ef-5457-1d8e-61fbebda91c4@riseup.net> <87zhu3b41w.fsf@gnu.org> <87va4qxf8e.fsf@posteo.net> <62a1a976-ed2f-a68d-0aa8-d6fb6bd46c14@riseup.net> Mime-Version: 1.0 Content-Type: text/plain Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:51019) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1gPi1t-0002by-9m for guix-devel@gnu.org; Thu, 22 Nov 2018 01:00:01 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1gPhmS-0007IA-Ow for guix-devel@gnu.org; Thu, 22 Nov 2018 00:44:05 -0500 Received: from mout01.posteo.de ([185.67.36.65]:43450) by eggs.gnu.org with esmtps (TLS1.0:DHE_RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1gPhmS-0007Ez-EB for guix-devel@gnu.org; Thu, 22 Nov 2018 00:44:00 -0500 Received: from submission (posteo.de [89.146.220.130]) by mout01.posteo.de (Postfix) with ESMTPS id 696D016005F for ; Thu, 22 Nov 2018 06:43:58 +0100 (CET) In-reply-to: <62a1a976-ed2f-a68d-0aa8-d6fb6bd46c14@riseup.net> List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: "Guix-devel" To: swedebugia Cc: guix-devel@gnu.org swedebugia writes: > Hi > > On 2018-11-22 00:22, swedebugia wrote: > snip > >> A graph of all npm packages and top packages is also available: >> https://exploring-data.com/info/npm-packages-dependencies/ > > While investigating the top libraries* packages with most depends in > npm I found the following: > > Lib Dep DevDep RecdevDep Dependants license > underscore 0 12 2400+ 18000+ mit > async 1 37 2696 26069 mit > > rec=recursive > > See also the issue I created here: > https://github.com/caolan/async/issues/1600 asking which of asyncs 37 > devdeps are needed to build or build+test async. > > And similar here: https://github.com/jashkenas/underscore/issues/2790 Holy cow. Thank you for taking the initiative on this, swedebugia. I tend to agree with your licensee approach, but I think this will require an undoubted good deal of man power before we are able to sufficiently move forward on npm imports with a decent velocity. I know that the largest issue of this as usual will be the JavaScript trap, but there will have to be some compromises on the part of people wanting to develop for Node on Guix when their libraries are missing due to non-free or ambiguous licensing. Not the least of which being the issues surrounding Electron on the Chromium licenses, which seems to be where a lot of energy is lately on the Node development side. I also do not want Guix to detract too much for "more important issues", not to say this isn't important. Just perhaps it isn't as much of a priority simply because that community and ours are not so cohesive at the current moment. I guess one could argue that we should be wanting to bring them to us, but I also know how disuasive "a lack of convenience" can be to those who are not as freedom and ethicality conscious as the rest of us. Brett Gilio