Return-Path: X-Original-To: apmail-cordova-dev-archive@www.apache.org Delivered-To: apmail-cordova-dev-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id C7DE717217 for ; Fri, 26 Sep 2014 01:18:14 +0000 (UTC) Received: (qmail 3196 invoked by uid 500); 26 Sep 2014 01:18:14 -0000 Delivered-To: apmail-cordova-dev-archive@cordova.apache.org Received: (qmail 3163 invoked by uid 500); 26 Sep 2014 01:18:14 -0000 Mailing-List: contact dev-help@cordova.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@cordova.apache.org Delivered-To: mailing list dev@cordova.apache.org Received: (qmail 3145 invoked by uid 99); 26 Sep 2014 01:18:13 -0000 Received: from athena.apache.org (HELO athena.apache.org) (140.211.11.136) by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 26 Sep 2014 01:18:13 +0000 X-ASF-Spam-Status: No, hits=1.5 required=5.0 tests=HTML_MESSAGE,RCVD_IN_DNSWL_LOW,SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (athena.apache.org: domain of mmocny@google.com designates 209.85.216.169 as permitted sender) Received: from [209.85.216.169] (HELO mail-qc0-f169.google.com) (209.85.216.169) by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 26 Sep 2014 01:18:10 +0000 Received: by mail-qc0-f169.google.com with SMTP id r5so4970113qcx.14 for ; Thu, 25 Sep 2014 18:17:49 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=mime-version:sender:in-reply-to:references:from:date:message-id :subject:to:content-type; bh=9r877zH13Y9PhOtpXxzK0J5yJZirD9nqPD6jyrhuEA8=; b=Ixxhid1CKnVnHRCjXOBq6lqr9b6/pXGb0OxGrEjyIXsu0xf+5L9cCPHluKE8oR23Nl q5gCQad8PRTX95OcjfpFK9g/nc4y3usfzrNGLgNWtcdWiIhOYWwIRhsdU+3j/2tAGibD ynwdDK/vJvuid3Caur4k1V3vNwbyNu9uwkHG0MkktaPLwVKEzd1EzNMAEruQ3cYXWPPZ T8T2CW8xzURU047nZs7Y/npJbIlcZKROgOghLFfYHpePNnLBTTo2jDOgknYJwPiDzXpB /9DiI+BIGz2kDt6AkMhMLX8MTFcTtKHDXnS5O/XnhlpJCD0PEVZgV/N5P3L4YrNxb5yy 5+eg== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=chromium.org; s=google; h=mime-version:sender:in-reply-to:references:from:date:message-id :subject:to:content-type; bh=9r877zH13Y9PhOtpXxzK0J5yJZirD9nqPD6jyrhuEA8=; b=isV5kDuH5pyUA4Jdh9hH5l2hualJZMamdTNlwp1K3OfIArvK9FJ8lDguLoR0aZDyMA UkbbqoqUOvMcDbdAW1dQ3ukXhnp1Om9LmK1zGdCCda0Kp99/Meh2FwPXRqeHA4v/9Mr7 AItu3NDktWRDeEcgfos/fBj1ORc5VvGng5qC0= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:sender:in-reply-to:references:from :date:message-id:subject:to:content-type; bh=9r877zH13Y9PhOtpXxzK0J5yJZirD9nqPD6jyrhuEA8=; b=Mn4sV6V5Ly2x5IJgemBOxgiAWshIuexUzRnx/imGLM6tcvkiv6fMDF9YCNdHFDFPUy 19pfHn6yGStLQbBPcyWALFVSCIl4oWmvMgkwJ8awUQhk2vwZmY6kz9FSCbw/skskQAof 7+dfLZi5KrOVkbcEQUzS4xmU+20Ko2/E43jACDrgJ+NcrLX21y8ywYm7jOO/39smDyCP kNniyj84QZQMh85/5JbxkPH7bPnYMIqsf7C0rCyHeWmy+o+dR4hzYyKa91NaYNwMZVIB y1i3TU3u6M14qTzrAqguF8JA5M69iKqNKsBJ+g5GyOfVV+P6zcUY8MKIPF9Jy/Ex4HDw WanQ== X-Gm-Message-State: ALoCoQmqBTp0ojdsRnDnerE25x00p2g+Asj6X1iM05jnmWER1mNs2kkrkhvtaNCqC6HxLPlNMf6M X-Received: by 10.224.104.2 with SMTP id m2mr25091084qao.52.1411694269034; Thu, 25 Sep 2014 18:17:49 -0700 (PDT) MIME-Version: 1.0 Sender: mmocny@google.com Received: by 10.229.101.202 with HTTP; Thu, 25 Sep 2014 18:17:28 -0700 (PDT) In-Reply-To: References: <54205260.302b460a.2627.ffffc98a@mx.google.com> From: Michal Mocny Date: Thu, 25 Sep 2014 21:17:28 -0400 X-Google-Sender-Auth: rZJl-TP-K5LzCLGwYZKMBoqxou4 Message-ID: Subject: Re: new NPM 2.x To: dev Content-Type: multipart/alternative; boundary=001a1132f378702ba30503edaf27 X-Virus-Checked: Checked by ClamAV on apache.org --001a1132f378702ba30503edaf27 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Yes, that was great. Also: 0.x.y is possibly a bad idea? (actually that seemed inconclusive, seems npm will continue to not treat 0. versions as special, but maybe one day that will change?) Also: scoped packages seem to be enterprise only (a scope roughly corresponds to a registry, it seems), but they also mentioned other grouping concepts. Would be interesting to replace cordova-FOO with @cordova/FOO, especially if we could actually vet which packages go into that namespace.. -Michal On Thu, Sep 25, 2014 at 7:29 PM, Brian LeRoux wrote: > that was really good. my takeaway: lets use shrinkwrap once they add all > this new hotness > > On Thu, Sep 25, 2014 at 12:42 PM, Carlos Santana > wrote: > > > Some of you might find this podcast [1] interesting, straight from the > > horse's mouth > > > > They discuss npm 2.x, opinions about semver, and modules using > pre-release > > strings as production packages, shrinkwrap, etc.. > > > > [1]: > > > > > http://javascriptjabber.com/127-jsj-changes-in-npm-land-with-forrest-norv= ell-rebecca-turner-ben-coe-and-isaac-z-schlueter > > > > > > On Mon, Sep 22, 2014 at 1:46 PM, Michal Mocny > wrote: > > > > > 1. pretty cool to be mentioned! > > > 2. The post led me to find: > > > https://gist.github.com/othiym23/4ac31155da23962afd0e which is > > basically > > > a > > > monkey patch for the recently-discussed-on-list npm upgrade command. > > > > > > -Michal > > > > > > On Mon, Sep 22, 2014 at 12:46 PM, purplecabbage < > purplecabbage@gmail.com > > > > > > wrote: > > > > > > > And a good read for Cordova contributors, as it discusses > > > > dependency/versioning issues, which bites us frequently too. > > > > > > > > Sent from my iPhone > > > > > > > > > On Sep 22, 2014, at 9:37 AM, Ray Camden > wrote: > > > > > > > > > > Gotcha. So not an issue for end users of Cordova - but perhaps fo= r > > > plugin > > > > > authors. > > > > > > > > > > > > > > >> On 9/22/14, 11:34 AM, "Ian Clelland" > > wrote: > > > > >> > > > > >> It shouldn't matter for users, but I have seen several issues in > the > > > > past > > > > >> where using the wrong version of npm means that you can't publis= h > > > > modules > > > > >> or plugins. It's something to be aware of, at least. > > > > >> > > > > >>> On Mon, Sep 22, 2014 at 12:30 PM, Ray Camden > > > > > wrote: > > > > >>> > > > > >>> Being lazy, but can you explain why it matters? Ie, is there a > > reason > > > > >>> *not* to just upgrade? I assume most folks would think, =C2=B3n= ew > > version > > > of > > > > >>> npm, just update and don=C2=B9t worry about it=C2=B2 - but does= it impact > > using > > > > >>> Cordova? > > > > >>> > > > > >>> > > > > >>>> On 9/22/14, 11:09 AM, "Carlos Santana" > > > wrote: > > > > >>>> > > > > >>>> NPM 2.x was released last week. > > > > > > > > > > > > > > > > > > > > -- > > Carlos Santana > > > > > --001a1132f378702ba30503edaf27--