incubator-general mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Marvin Humphrey <mar...@rectangular.com>
Subject Re: Publishing npm modules
Date Tue, 11 Apr 2017 23:03:23 GMT
On Tue, Apr 11, 2017 at 7:00 AM, Niclas Hedhman <niclas@hedhman.org> wrote:

> does anyone have any information on policy/process for uploading npm
> modules to global registry https://registry.npmjs.org/

With regards to publication of packages, npm is just another downstream
distribution channel -- like Maven Central, Docker Hub, PyPI, CPAN, Debian,
crates.io, etc.

The main policy point that comes up is this one:

    http://www.apache.org/legal/release-policy#publication

    Projects SHALL publish official releases and SHALL NOT publish unreleased
    materials outside the development community.

The second policy point that comes up frequently has to do with trademarks: we
expect that anything published as "Apache Foo" will actually be "Apache Foo",
and not, say, a vendor-specific "sneak peek" version incorporating
controversial new features.

It can also be important that multiple PMC members have upload permissions
for a given distribution channel.  That's a best practice, not a policy,
though.

But these points apply across all downstream distribution channels, not
just npm.

> This is for convenience and should be similar to publishing to Maven
> Central, but I would like to know if there is anything explicit about it.

Infra provides some extra support for certain kinds of distribution (we run
repository.apache.org, we used to run a PEAR repo, etc).  I don't know of
any special technical support related to npm, though.

Marvin Humphrey

---------------------------------------------------------------------
To unsubscribe, e-mail: general-unsubscribe@incubator.apache.org
For additional commands, e-mail: general-help@incubator.apache.org


Mime
View raw message