From mboxrd@z Thu Jan 1 00:00:00 1970 From: Giovanni Biscuolo Subject: Re: NPM importer Date: Wed, 21 Nov 2018 17:37:40 +0100 Message-ID: <878t1m1j57.fsf@roquette.mug.biscuolo.net> References: <87ftw7r14u.fsf@gnu.org> Mime-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512; protocol="application/pgp-signature" Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:49464) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1gPVW0-0005hf-Dq for guix-devel@gnu.org; Wed, 21 Nov 2018 11:38:15 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1gPVVu-0007EB-LT for guix-devel@gnu.org; Wed, 21 Nov 2018 11:38:10 -0500 In-Reply-To: <87ftw7r14u.fsf@gnu.org> List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: "Guix-devel" To: Ludovic =?utf-8?Q?Court=C3=A8s?= , swedebugia Cc: guix-devel@gnu.org --=-=-= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable ludo@gnu.org (Ludovic Court=C3=A8s) writes: [...] > Yes, this was the topic of a GSoC project by Jelle Licht (Cc=E2=80=99d). = But > don=E2=80=99t hold your breath: as Chris Webber explained, the npm situat= ion is > very hard to address sanely: > > http://dustycloud.org/blog/javascript-packaging-dystopia/ (semi OT: today Debian ships a recent jquery 3.2.1) I'm not an expert in js (nor guix) packaging so I'm not able to judge this: https://spin.atomicobject.com/2016/12/16/reproducible-builds-npm-yarn/ is yarn a viable solution to the NPM packaging problems? can we achieve reproducible builds ala guix with a yarn importer and some amount of yarn packages downloading/automation and offline mirroring? Ciao Giovanni P.S.: why=20 =2D- Giovanni Biscuolo Xelera IT Infrastructures --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEERcxjuFJYydVfNLI5030Op87MORIFAlv1idQACgkQ030Op87M ORKfYRAAvLZK6nY6uZN+fH4dekOT1XFGGUFTvzlSwRX7UaXEfjKJLBGpbHNJctxi vRYWBTgumGWwV7gmyF84So55W2O0V1PWq1VQJ2KuhMWr7mkaq3FLh+TrldyBxsui 7vKmpdy4VjXZ+TymPa2V91Cy5YUT9UzsDedZ2fIcGwjKnnGwRqbCrkloCDLK/z7o ptAM/L8n9XB05/V2uJx3b7+jkKJeCr4ugaF9xk+SdvuBra6F8ewspItKHv4QfdY/ 5ez8Lq1gcUGMKlTCVVPAD/iilubJ22seZJ9+d6WGn4XBMFoukXf0IcN0iU8HDjpu hjX0h5jKK86GucOyKks9sXkhxk3TMDyV7QMl9A30YV8S25ZBnlTOvYfq2GDDjb88 eAE4uLfmCK/+1s7mIC5YTsHIEQfXqsIZx1YtQSwtTiWiyvijFtVu2CmabjLZJtbD /OzolQ2ozNMAZXMAcgBPBFEmv3SQZQ+n34amB1VyWrCxTbeyPzv6SqtgtcPx7gRQ K76k5G/3B+9dgY8aMDNKnc6i9iU5ZqTofSw4GgmukJhcMdgEarNV3UMzYwYLrm2l 6bTGhpDjx+YDM23Nq4ZVoXhVVh8wg77rk2FRm8LLqXi+/s3CJ9HG/28tAH9Amt/m ZdR5way/ijNJ7ghI5AWoqwhnMcWK8jca6qETnt/MgqFCSI2zwKA= =W7WP -----END PGP SIGNATURE----- --=-=-=--