Mailing-List: contact dev-help@couchdb.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@couchdb.apache.org
MIME-Version: 1.0
In-Reply-To: <6760176.589.1460582994335.JavaMail.Joan@RITA>
References: 
 <CAHdjipL6G=zBVWpdtV1eyCPS0vrrKrcOdJ+6Oox6DONoe9QLOg@mail.gmail.com>
	<6760176.589.1460582994335.JavaMail.Joan@RITA>
Date: Thu, 14 Apr 2016 08:43:10 +0200
Message-ID: 
 <CAOFTT0z5HaW9Sz16AyESorJKv-nuqVCSyyK8hg-L8RWAZ7Ehzw@mail.gmail.com>
Subject: Re: On dependency management and CI issues associated with it
From: Garren Smith <garren@apache.org>
To: "dev@couchdb.apache.org" <dev@couchdb.apache.org>,
 Joan Touzet <wohali@apache.org>
Content-Type: multipart/alternative; boundary=001a11c24064332c0205306c3503

--001a11c24064332c0205306c3503
Content-Type: text/plain; charset=UTF-8

Hi Joan,

Good point. Until about a week ago we use to keep all our dependencies in
our repo. But we have just switched to webpack which allows us to manage
our dependencies via npm (in case you are wondering, we don't depend on
leftpad directly). So some of them are in our repo but the majority are
downloaded and then bundled.


Cheers
Garren

On Wed, Apr 13, 2016 at 11:29 PM, Joan Touzet <wohali@apache.org> wrote:

> Garren, correct me if I'm wrong but Fauxton depends on a large number
> of JS dependencies that we don't keep copies of, correct? Or is it just
> for the build process?
>
> -Joan
>
> ----- Original Message -----
> > From: "Alexander Shorin" <kxepal@gmail.com>
> > To: dev@couchdb.apache.org
> > Sent: Wednesday, April 13, 2016 2:08:20 PM
> > Subject: Re: On dependency management and CI issues associated with it
> >
> > On Wed, Apr 13, 2016 at 8:39 PM, Robert Newson <rnewson@apache.org>
> > wrote:
> > > It's a thread derail but this notion that we're being "fairly rude"
> > > needs resolving. It might be lost to history now but we got here,
> > > I think, with the best intentions of ensuring all the code that
> > > appears in couchdb can be traced back to code hosted at asf. Is it
> > > a concrete requirement? I honestly forget but I thought so.
> >
> > Yes, that's the answer why. If one day mochiweb owner will decide to
> > drop his github repo, we shouldn't be leave with broken builds. See
> > leftpad story as well. Initially, that requirement seems redundant,
> > but recent npm drama showed that it has a huge point. Also there are
> > some legal bits about.
> >
> > --
> > ,,,^..^,,,
> >
>

--001a11c24064332c0205306c3503--