From mboxrd@z Thu Jan 1 00:00:00 1970 From: Jelle Licht Subject: Re: npm (mitigation) Date: Fri, 14 Jul 2017 13:57:30 +0200 Message-ID: References: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="001a1143ea80fae85d055445c08a" Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:40034) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1dVzE1-0002DK-Tl for guix-devel@gnu.org; Fri, 14 Jul 2017 07:57:38 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1dVzE0-0003YN-Px for guix-devel@gnu.org; Fri, 14 Jul 2017 07:57:37 -0400 Received: from mail.fsfe.org ([2001:aa8:ffed::3:102]:59549) by eggs.gnu.org with esmtps (TLS1.0:DHE_RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1dVzE0-0003Xp-GT for guix-devel@gnu.org; Fri, 14 Jul 2017 07:57:36 -0400 Received: from localhost (localhost [127.0.0.1]) by mail.fsfe.org (Postfix) with ESMTP id 9B1056398BA for ; Fri, 14 Jul 2017 13:57:34 +0200 (CEST) Received: from mail.fsfe.org ([127.0.0.1]) by localhost (cavendish.fsfeurope.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id H2k3NM8OoCmj for ; Fri, 14 Jul 2017 13:57:34 +0200 (CEST) Received: by mail-it0-f54.google.com with SMTP id v202so18886091itb.0 for ; Fri, 14 Jul 2017 04:57:34 -0700 (PDT) In-Reply-To: List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: "Guix-devel" To: Catonano Cc: guix-devel --001a1143ea80fae85d055445c08a Content-Type: text/plain; charset="UTF-8" Hi Catonano, I would be be happy to help you with this, but tbh, I am not comfortable discussing this in-depth on guix-devel, as this seems antithetical to Guix' goals. All I will say here is that you need to adapt the npm importer to use the sources from the npm registry instead of resolving to any 'upstream' urls. I believe Jan's importer was already able to do this last time I checked, so you might really only need to checkout their branch and rebase on current master. Regardless, the biggest issue that remains is still that npm-land is mired in cyclical dependencies and a fun-but-not-actually unique dependency resolving scheme. I am currently working on a guile version of what Sander did for Nix for importing entire npm dependency trees, but this will likely lead to lots of programmatically defined packages instead of the guix approach of mostly-manually defining each package. It might therefore be a good candidate for a guix channel, if that is still being worked on. Good luck! - Jelle 2017-07-14 10:52 GMT+02:00 Catonano : > I read that Jelle and Jan used their own branch in order to have npm based > software to be installed in their GuixSD environments, as binary blobs > > Can I ask you for instructions about how to do that exactly ? > > I might need to work a litle on some web siites in the future > > Which branch exactly did you use, and how, exactly ? > > Thanks > --001a1143ea80fae85d055445c08a Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Hi Catonano,

I = would be be happy to help you with this, but tbh, I am not comfortable disc= ussing this in-depth on guix-devel, as this seems antithetical to Guix'= goals.
All I will say here is that you need to adapt the npm impo= rter to use the sources from the npm registry instead of resolving to any &= #39;upstream' urls.
I believe Jan's importer was already a= ble to do this last time I checked, so you might really only need to checko= ut their branch and rebase on current master.

Regardless, the = biggest issue that remains is still that npm-land is mired in cyclical depe= ndencies and a fun-but-not-actually unique dependency resolving scheme.
=
I am currently working on a guile version of what Sander did for Nix = for importing entire npm dependency trees, but this will likely lead to lot= s of programmatically
defined packages instead of the guix approach of = mostly-manually defining each package. It might therefore be a good candida= te for a guix channel, if that is still
being worked on.
<= br>
Good luck!

- Jelle

2017-07-14 10:52 GMT+02:00= Catonano <catonano@gmail.com>:
I read that Jelle and Jan used = their own branch in order to have npm based software to be installed in the= ir GuixSD environments, as binary blobs

Can I ask you for inst= ructions about how to do that exactly ?

I might need to work a= litle on some web siites in the future

Which branch exactly d= id you use, and how, exactly ?

Thanks

--001a1143ea80fae85d055445c08a--