From dev-return-4178-archive-asf-public=cust-asf.ponee.io@openwhisk.apache.org Wed Jul 17 17:08:31 2019 Return-Path: X-Original-To: archive-asf-public@cust-asf.ponee.io Delivered-To: archive-asf-public@cust-asf.ponee.io Received: from mail.apache.org (hermes.apache.org [207.244.88.153]) by mx-eu-01.ponee.io (Postfix) with SMTP id 0356C18060E for ; Wed, 17 Jul 2019 19:08:30 +0200 (CEST) Received: (qmail 51669 invoked by uid 500); 17 Jul 2019 17:08:30 -0000 Mailing-List: contact dev-help@openwhisk.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@openwhisk.apache.org Delivered-To: mailing list dev@openwhisk.apache.org Received: (qmail 51657 invoked by uid 99); 17 Jul 2019 17:08:29 -0000 Received: from pnap-us-west-generic-nat.apache.org (HELO spamd2-us-west.apache.org) (209.188.14.142) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 17 Jul 2019 17:08:29 +0000 Received: from localhost (localhost [127.0.0.1]) by spamd2-us-west.apache.org (ASF Mail Server at spamd2-us-west.apache.org) with ESMTP id 5BC6A1A333F for ; Wed, 17 Jul 2019 17:08:29 +0000 (UTC) X-Virus-Scanned: Debian amavisd-new at spamd2-us-west.apache.org X-Spam-Flag: NO X-Spam-Score: 1.802 X-Spam-Level: * X-Spam-Status: No, score=1.802 tagged_above=-999 required=6.31 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=2, KAM_SHORT=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=disabled Authentication-Results: spamd2-us-west.apache.org (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mx1-ec2-va.apache.org ([10.40.0.8]) by localhost (spamd2-us-west.apache.org [10.40.0.9]) (amavisd-new, port 10024) with ESMTP id MUgyHDKUEFzS for ; Wed, 17 Jul 2019 17:08:27 +0000 (UTC) Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=209.85.166.52; helo=mail-io1-f52.google.com; envelope-from=boards@gmail.com; receiver= Received: from mail-io1-f52.google.com (mail-io1-f52.google.com [209.85.166.52]) by mx1-ec2-va.apache.org (ASF Mail Server at mx1-ec2-va.apache.org) with ESMTPS id 741F6BC7AD for ; Wed, 17 Jul 2019 17:08:27 +0000 (UTC) Received: by mail-io1-f52.google.com with SMTP id h6so46887451iom.7 for ; Wed, 17 Jul 2019 10:08:27 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to; bh=vwBOzTuh8q4eRfG4ze6M6kuNJenHJo/49VakvTVHSjg=; b=tkr3pWNCQneqMwSRKiAILdYPnFSD5WXviq2uwsjfV+G+jyRksSEeTrEKlbgC1XNxWJ HrnAlTcRca0SLBNC7koGjcHheJ9nFfUS98HL/USWB8ZpzN8Kq+Ji+0prijZ+mx2RkUJx A3KxACVSInht1hhzlIItioVweHHhGkicQTm1O4iIdbNp4TfQOy8tKVn7lsvvTUBCs2fj Tn7OCPu40fpVLGpv7TnfE3HGk4Ah/0JGC9vmBGqgjCmCRcVX1WtIiUbzy9UYGPeqE70w MDkCysyBumqthYzz55XF2aRNPv7jtmjlzBE+niO8yOCYQSHMVTv+EtJOBGLSMQa6O1ZE Hwww== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to; bh=vwBOzTuh8q4eRfG4ze6M6kuNJenHJo/49VakvTVHSjg=; b=MqaWTHQivuTq72RI7x0sweP1g1q5Xw6PEI/Ql4qrIDWLHOXGQZqtRBXBhWEps7m+AC nKfPDP1N2rdX5NoC8vuAaush+9HI3o1LJ460k5FHo2TE8spAMbrFR5Q7NfW8oehkQq4c hFd0mtdoS4MlKU1mKuRcLF0ezALpV73dmZg4WWhyBQ1l4KbQQPmMeMH+/YnSjJm7hU7j Zbwqxi6XL5ImstXAGh3dxuEo+5I+gPGSZPyY9T3DYJRLkYOjh4Zf/0G3DsU1oIVFiOcH OEoGMJdsWnn8FA8mMDovCJ94pKk2shOygwXaKHs/puB9P40zcL+Y2+kRgpPZCeRrdsc7 NOFA== X-Gm-Message-State: APjAAAU8tPYMQInt8SOYxmGOeWC9HaVGjBp38Wdy4YMXumo3n+CkyBx8 0n+gppFQWuQvUOR+m2sdglMG10WqhuKMJrgAwKcdHWIl X-Google-Smtp-Source: APXvYqylXqlbjF0ZBUb/RLIf785WKq6ByeF9+wW8V2WC/LjxjoGNyY6yJALbQWAFB1LLZlm/hkqgFhm/6PZHpTfNvNg= X-Received: by 2002:a02:1c0a:: with SMTP id c10mr44127722jac.69.1563383306299; Wed, 17 Jul 2019 10:08:26 -0700 (PDT) MIME-Version: 1.0 References: In-Reply-To: From: Matt Sicker Date: Wed, 17 Jul 2019 12:08:15 -0500 Message-ID: Subject: Re: Re: Changing JavaScript SDK NPM Module Name: openwhisk => apache-openwhisk? To: dev@openwhisk.apache.org Content-Type: multipart/alternative; boundary="0000000000009eb0cc058de38a8d" --0000000000009eb0cc058de38a8d Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable It=E2=80=99s likely a topic that is brought up by the board once in a while= for those projects. On Wed, Jul 17, 2019 at 12:06, James Thomas wrote: > I've discovered the Cordova project publishes all their project repos > without the `apache-` prefix. > https://www.npmjs.com/search?q=3Dcordova > > Same goes for thrift (https://www.npmjs.com/package/thrift). I've > guess there's precedence that maybe this isn't an issue? > > On Mon, 15 Jul 2019 at 18:17, Matt Sicker wrote: > > > > Most or all of the Apache projects that are distributed on Homebrew > > are named apache-foo. > > > > ...except for `wsk` and `wskdeploy` which are curiously lacking > > `apache-` prefixes as well. ;) > > > > On Mon, 15 Jul 2019 at 12:08, Matt Rutkowski > wrote: > > > > > > I too like the dash approach unless Apache likes having a domain name > > > style which implies (family) membership hierarchy. > > > > > > > > > > > > From: Matt Sicker > > > To: dev@openwhisk.apache.org > > > Date: 07/15/2019 12:05 PM > > > Subject: [EXTERNAL] Re: Changing JavaScript SDK NPM Module Nam= e: > > > openwhisk =3D> apache-openwhisk? > > > > > > > > > > > > The name with the dash looks nicer, agreed. In migrating from an old > > > package name to a new one where you already have existing users, I > > > haven't seen a solution to that myself quite yet, though I know that > > > Groovy has a similar problem where their packages are still published > > > under the `org.codehaus.groovy` group id instead of > > > `org.apache.groovy`. While Maven and NPM are quite different, the > > > method of migrating a package name is similarly not well-defined in > > > both systems. > > > > > > Does anyone have more info about how NPM runs their repository? Maybe > > > they can add in some redirects of some sort. > > > > > > On Mon, 15 Jul 2019 at 11:11, James Thomas > wrote: > > > > > > > > Reviewing the ASF guidelines on NPM packages to check our JS SDK > > > satifises > > > > all the rules[1] - we're supposed to be publishing the NPM package = as > > > > "apacheopenwhisk" and not "openwhisk". This NPM library was > published at > > > ( > > > > > > > > https://urldefense.proofpoint.com/v2/url?u=3Dhttps-3A__www.npmjs.com_pack= age_openwhisk&d=3DDwIBaQ&c=3Djf_iaSHvJObTbx-siA1ZOg&r=3D6zQLM7Gc0Sv1iwayKOK= a4_SFxRIxS478q2gZlAJj4Zw&m=3DNilRlnhMriE1MNYQW3S_Ni47FW8uu-CTsXNbM3FYkH8&s= =3DC-3wIDNjUO6k1tpWW7WQA9d4c-lbe7KshNS1jAR6jxM&e=3D > > > ) before the project was donated to > > > > Apache. > > > > > > > > Moving from the library to publish at `apache-openwhisk` rather tha= n > > > > `openwhisk`[2] is not technically challenging (and the new package > name > > > is > > > > available) but will cause numerous issues.... > > > > > > > > I'm asking for comments on what to do about this. Would like to > engage > > > the > > > > ASF mentors for advice as well. What does the community think about > > > this? > > > > > > > > The library has significant usage (NPM tells me the library is > averaging > > > 6k > > > > downloads a week) using the existing package name. GitHub lists 38K > > > > references to the module. > > > > > > > > https://urldefense.proofpoint.com/v2/url?u=3Dhttps-3A__github.com_search-= 3Fq-3Drequire-2528-2522openwhisk-2522-2529-26type-3DCode&d=3DDwIBaQ&c=3Djf_= iaSHvJObTbx-siA1ZOg&r=3D6zQLM7Gc0Sv1iwayKOKa4_SFxRIxS478q2gZlAJj4Zw&m=3DNil= RlnhMriE1MNYQW3S_Ni47FW8uu-CTsXNbM3FYkH8&s=3DnIOIJxXhbd1TkXzWJVHx9-NAMQV4Ju= BsXbm1pEkX8u0&e=3D > > > > > > > > > > > All those external dependent projects, blog posts, documentation an= d > > > > tutorials, etc, that reference the library (and are outside of our > > > control) > > > > will be reliant on the old package name. These will still work (as > the > > > old > > > > library version will still be available from NPM) but never receive > new > > > > versions on installing the dependency. This may eventually mean the > old > > > > library doesn't work with future platform changes and/or lead to > > > security > > > > issues with outdated dependencies. > > > > > > > > I'm not sure if there's any leeway in the allowing the short-name f= or > > > the > > > > NPM library (given we follow all the other requirements)? This will > be a > > > > significant amount of work just changing all the references in > project > > > we > > > > control. > > > > > > > > If we do change the name - I'd assume `apache-openwhisk` is fine. > Using > > > > `apacheopenwhisk` is slightly horrid.... > > > > > > > > [1] - > > > > > > > > https://urldefense.proofpoint.com/v2/url?u=3Dhttps-3A__cwiki.apache.org_c= onfluence_pages_viewpage.action-3FpageId-3D109454613&d=3DDwIBaQ&c=3Djf_iaSH= vJObTbx-siA1ZOg&r=3D6zQLM7Gc0Sv1iwayKOKa4_SFxRIxS478q2gZlAJj4Zw&m=3DNilRlnh= MriE1MNYQW3S_Ni47FW8uu-CTsXNbM3FYkH8&s=3DZshMeW40IVmdVpBrfK3b_ERcnaA4Bh7h3i= qXvO_NDCc&e=3D > > > > > > > [2] - following NPM JS module conventions - apache-openwhisk is muc= h > > > > preferable than a single word (apacheopenwhisk). > > > > > > > > -- > > > > Regards, > > > > James Thomas > > > > > > > > > > > > -- > > > Matt Sicker > > > > > > > > > > > > > > > > > > > > > -- > > Matt Sicker > > > > -- > Regards, > James Thomas > --=20 Matt Sicker --0000000000009eb0cc058de38a8d--