There's a thread going around about how the current npm vuln is because they're vc funded, and that's why we should be using yarn instead. regardless of whether that statement is accurate, it made me realize i have no idea if yarn is a facebook project or not
-
Show this thread
-
On one hand, it’s not directly owned by facebook: - the copyright in the license is to "Yarn Contributors" (vs React, which lists “Facebook” - the current yarn site doesn't mention facebook at all - github contributors don't seem to need to sign a facebook CLA
3 replies 0 retweets 0 likesShow this thread -
But everyone I’ve asked on slack seems to _think_ Yarn is a Facebook project. It was originally announced by Facebook as "a collaboration with Exponent, Google, and Tilde" and the registry servers appear to be run by Facebook https://code.fb.com/web/yarn-a-new-package-manager-for-javascript/ …
2 replies 0 retweets 0 likesShow this thread
The server part is just a proxy to their registry with CloudFlare. npm recently moved to CloudFlare though and they took over control of the Yarn registry proxy so it’s essentially a CNAME at this point that’s controlled by them.
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.
he/him 