Return-Path: X-Original-To: apmail-cordova-dev-archive@www.apache.org Delivered-To: apmail-cordova-dev-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id 73EFA10087 for ; Mon, 15 Dec 2014 15:28:38 +0000 (UTC) Received: (qmail 19024 invoked by uid 500); 15 Dec 2014 15:28:38 -0000 Delivered-To: apmail-cordova-dev-archive@cordova.apache.org Received: (qmail 18984 invoked by uid 500); 15 Dec 2014 15:28:38 -0000 Mailing-List: contact dev-help@cordova.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@cordova.apache.org Delivered-To: mailing list dev@cordova.apache.org Received: (qmail 18971 invoked by uid 99); 15 Dec 2014 15:28:37 -0000 Received: from athena.apache.org (HELO athena.apache.org) (140.211.11.136) by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 15 Dec 2014 15:28:37 +0000 X-ASF-Spam-Status: No, hits=1.5 required=5.0 tests=HTML_MESSAGE,RCVD_IN_DNSWL_LOW,SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (athena.apache.org: domain of agrieve@google.com designates 209.85.218.51 as permitted sender) Received: from [209.85.218.51] (HELO mail-oi0-f51.google.com) (209.85.218.51) by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 15 Dec 2014 15:28:33 +0000 Received: by mail-oi0-f51.google.com with SMTP id e131so8191869oig.10 for ; Mon, 15 Dec 2014 07:28:12 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=mime-version:sender:in-reply-to:references:from:date:message-id :subject:to:content-type; bh=rtqHiosXRtyJaLZg2DJ+i/ogF+zIua7mc+jlJEuZSBY=; b=f+CawCdnoYWb1sTynTP8RtIFODG3AsEFHYsdmjoweX3PNYDb3SiXL8skuMeYfRPTPF Tf0jqqy3fQmtJWd8DBy+7p3tBj8tpuUbZ/ltLKwQce0V/mMEpE3PYLISIUuAF38HoXSk K25ZvIBBzoRlLVHjuIfqD352cPNm8NJem/DMWwauUModyQqBUQaViW5SKdCq1vuQ0PdR E+KAAmqpQpKwKne++gZJKhtCQyJ0+CrexQAJCqt6v6Ortu2kXzRbZpX/f/odU5z9nEBL XqcSS0YWeNqaRxB3k6/g4wMQueVeADUxoB8s3LguC+aWW8IAdu0eSs92O0tPnHiI8XnX i28A== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=chromium.org; s=google; h=mime-version:sender:in-reply-to:references:from:date:message-id :subject:to:content-type; bh=rtqHiosXRtyJaLZg2DJ+i/ogF+zIua7mc+jlJEuZSBY=; b=DwBKaHNMgQxtLKaWk4ITtRe5YvbPnDTjwAlo435Iltad4tZztVzu8oOymHPg/vFH+1 nWaI87j3q5gEf+ZDoY+3iY1AiFoW8p9mZWAnqeBHD5LRZCqqGnPS7oMEvf0+UuTH2Oeh 4UVIHaQcB5Hfdfs7TIzcXCxjar8PlAP1Cses4= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:sender:in-reply-to:references:from :date:message-id:subject:to:content-type; bh=rtqHiosXRtyJaLZg2DJ+i/ogF+zIua7mc+jlJEuZSBY=; b=Tqnxz5RF/1X3UQjWFKK4Zi1tnqrDAn8GvBvlYGOBz53vPwiH2Unjx9iaWqqD5g7pSo BBfLUZVv+qmCgABu9fUijSdt6WXePHgZN/0MLOBpCINgIfmdLhEp0WgNAdzMOSVylraN Z9Zt3wBusnSjI3Sbp3Z5/ePord6Xd9K786psDwTq1dWNuFyfMKyWvICzpBQRx+AWtNOx y5HmVh34vkAo/CvQdbz1tzEgZA9na83xY1eeEno6kiw2kvWyR+AS1OLUzTET+cXA0Fx6 jwlpObxUte4DqTvXSPxsyRWTVBcE+v8mZEufR5T5nBc/aOO/k+UIm/oSjBL5aQGeAun0 iXjQ== X-Gm-Message-State: ALoCoQmlffzy+a/+6YMZJCfqqmcEGMuSqxP2ImClFLfHQoxMt6Rb4Z1DRXhTp6ea2oj9HIaHTj8y X-Received: by 10.202.194.195 with SMTP id s186mr4003211oif.23.1418657292633; Mon, 15 Dec 2014 07:28:12 -0800 (PST) MIME-Version: 1.0 Sender: agrieve@google.com Received: by 10.182.222.106 with HTTP; Mon, 15 Dec 2014 07:27:52 -0800 (PST) In-Reply-To: References: From: Andrew Grieve Date: Mon, 15 Dec 2014 10:27:52 -0500 X-Google-Sender-Auth: 4bIZ1udDLZQ3EaBz1tUz54t83Og Message-ID: Subject: Re: Browserify JS is in To: dev Content-Type: multipart/alternative; boundary=001a113d723efc9195050a42e301 X-Virus-Checked: Checked by ClamAV on apache.org --001a113d723efc9195050a42e301 Content-Type: text/plain; charset=UTF-8 Maybe most other companies are not in the same boat, but at Google we can't add any software to our build process without it all being checked into source control (and reviewed). Currently NPM is our biggest dependency, but thankfully we use that only for fetching (and so don't need it if we already have things locally). We launched an app (Primer) a few months ago, and as a part of that I had to re-write some of cordova-lib in Python (was actually not that bad). So, I'm really trying to figure out what the goals of browserify are in case I need to re-implement it (Gorkem will also have to re-implement it in Java for Thyme) I *think* we're at: 1. To concatenate cordova-js with plugin JS 2. To trim away modules from cordova-js that are not used by plugins & the active platform Sound good? Complete list? On Mon, Dec 15, 2014 at 9:25 AM, Michal Mocny wrote: > Thanks Steven. > > On Mon, Dec 15, 2014 at 12:15 AM, Steven Gill > wrote: > > > > For the lazy: cordova_plugins.js discussion > > https://issues.apache.org/jira/plugins/servlet/mobile#issue/CB-8153 > > On Dec 14, 2014 6:58 PM, "Michal Mocny" wrote: > > > > > Lets discuss the cordova_plugins.js thing elsewhere, this thread has > > forked > > > a lot already. > > > > > > On Sun, Dec 14, 2014 at 6:22 PM, Carlos Santana > > > wrote: > > > > > > > > This is the part that I like the most: > > > > "and start > > > > writing plugins as proper node modules. Maybe even push them to npm > and > > > > manage dependencies that way." > > > > > > > > Agree with having less XHR, and concatenate cordova + plugins. > > > > Not in love with cordova_plugins.js to know what plugins are included > > in > > > > the app, would prefer to see a package.json with all software that > was > > > use > > > > to build the app, and maybe one day could a be a real valid > > pacakge.json > > > > that can be use to pull down dependencies. > > > > > > > > The same way we depend on npm, elementree, and dozen more npm modules > > > that > > > > our platforms and cli depend on, we don't distribute browserfy will > be > > > just > > > > another one. > > > > One thing I will consider with browserfy if there is a any code > coming > > > from > > > > browserfy like the bootstrap code that contains the require function, > > > then > > > > maybe only this code get's legally review as it going to be part of > the > > > App > > > > that developer builds with cordova. > > > > > > > > > > > > > > > > > > > > > > > > > > > > On Fri, Dec 12, 2014 at 5:34 PM, Brian LeRoux wrote: > > > > > > > > > > yeah we are *not* proposing to distribute browserify or its deps > > > > > > > > > > On Fri, Dec 12, 2014 at 1:38 PM, Joe Bowser > > wrote: > > > > > > > > > > > What are we actually distributing? > > > > > > > > > > > > On Fri Dec 12 2014 at 12:36:03 PM Andrew Grieve < > > > agrieve@chromium.org> > > > > > > wrote: > > > > > > > > > > > > > On Fri, Dec 12, 2014 at 1:51 PM, Joe Bowser > > > > > wrote: > > > > > > > > > > > > > > > On Fri Dec 12 2014 at 10:25:51 AM Andrew Grieve < > > > > > agrieve@chromium.org> > > > > > > > > wrote: > > > > > > > > > > > > > > > > > > > > > > > > > > I'm not actually worried about my disk filling up. > > Dependencies > > > > > must > > > > > > be > > > > > > > > > vetted for appropriate licenses, so now there's more > overhead > > > > here. > > > > > > If > > > > > > > we > > > > > > > > > need to make a change to the module system now we need to > > poor > > > > > > through > > > > > > > > docs > > > > > > > > > and make PRs instead of just editing our very small > > code-base. > > > > > > > > > > > > > > > > > > > > > > > > > > This mix of MIT and 3-Clause BSD looks compatible to me. > It's > > > > weaker > > > > > > > than > > > > > > > > Apache, but not incompatible. Do we really need to send this > > to > > > > > legal? > > > > > > > > > > https://github.com/substack/node-browserify/blob/master/LICENSE > > > > > > > > > > > > > > > > There are people who can argue your other points better, but > > > saying > > > > > > that > > > > > > > > the license is the overhead when you can find it in the repo? > > > I'm > > > > > not > > > > > > > sure > > > > > > > > how we would have gotten this far if we had to check with > legal > > > for > > > > > > every > > > > > > > > single dependency. > > > > > > > > > > > > > > > > > > > > > > I meant that it depends on a bunch of other modules. Run > > > > > license-checker > > > > > > on > > > > > > > browserify and you get: http://pastebin.com/XDMCTRRb > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > -- > > > > Carlos Santana > > > > > > > > > > > > > > --001a113d723efc9195050a42e301--